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Abstract 


Various  government  Ministers  have  affirmed  the  importance  government  attaches  to  the 
protection  of  critical  energy  infrastructure.  Nine  years  after  the  attacks  on  11  September  2001 
first  focused  attention  on  the  potential  vulnerability  of  infrastructure  and  the  economic,  social  and 
political  consequences  of  a  failure  of  assurance,  a  strategy  has  still  not  been  approved  and  the 
assets  requiring  protection  not  yet  identified.  While  due  respect  must  be  given  to  the  jurisdictional 
authorities  which  have  been  established  by  the  Constitution,  international  terrorism  and  newly 
emerging  global  threats  such  as  electronic  attacks  on  IT  and  communication  systems  have  only 
increased  the  urgency  for  Canada  to  have  in  place  a  proactive,  seamless  system  for  the  protection 
of  those  energy  assets  and  services  which  are  so  vital  to  Canada’s  well-being  and  prosperity,  and 
North  American  security.  The  effectiveness  of  the  draft  Strategy  and  Action  Plan  proposed  by 
Public  Safety  Canada  will  depend  upon  the  voluntary  participation  of  the  various  public  and 
private  sector  stakeholders  and  the  extent  to  which  a  culture  of  information  sharing  and 
collaboration  can  be  inculcated.  Arguably,  this  is  a  passive  and  reactive  Plan  which  gives 
insufficient  attention  to  deterring  and  preventing  malicious  attacks  on  infrastructure. 


Resume 


Plusieurs  ministres  ont  affirme  que  le  gouvernement  attache  beaucoup  d'importance  a  la 
protection  des  infrastructures  energetiques  essentielles.  Neuf  ans  apres  les  attaques  du 
11  septembre  2001  aient  pour  la  premiere  fois  attire  l'attention  sur  la  vulnerabilite  potentielle  des 
infrastructures  et  les  consequences  economiques,  sociales  et  politiques  de  notre  incapacity  a 
assurer  leur  securite,  une  strategic  n'a  toujours  pas  ete  approuvee  et  les  actifs  ayant  besoin  d'etre 
proteges  n'a  toujours  pas  ete  identifiee.  Bien  qu'il  soit  necessaire  de  respecter  les  competences  de 
juridiction  definies  par  la  Constitution,  le  terrorisme  international  et  les  menaces  qui  ont 
commence  a  emerger  au  niveau  mondial — tels  que  les  attaques  electroniques  contre  les  systemes 
de  TI  et  de  communication — n'ont  fait  qu'accroitre  l'urgence  pour  le  Canada  de  mettre  en  place  un 
systeme  proactif  et  transparent  de  protection  de  ces  actifs  producteurs  d'energie  et  des  services 
energetiques  qui  sont  si  essentiels  a  la  prosperity  et  au  bien-etre  du  Canada  ainsi  qu’a  la  securite 
de  l'Amerique  du  Nord.  L'efficacite  de  l'ebauche  de  la  Strategic  et  plan  d'action  en  matiere 
d'energie  proposee  par  Securite  publique  Canada  dependra  de  la  participation  volontaire  des 
differents  intervenants  des  secteurs  public  et  prive  et  de  notre  capacity  a  inculquer  une  culture  de 
collaboration  et  de  partage  de  l'information.  II  est  sans  doute  permis  de  penser  qu'il  s'agit  d'un 
plan  passif  et  reactionnel  qui  accorde  une  attention  insuffisante  a  la  dissuasion  et  a  la  prevention 
d'attaques  malveillantes  contre  les  infrastructures. 
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Executive  summary 


Critical  Energy  Infrastructure  Protection  in  Canada: 

Angela  Gendron;  DRDC  CORA  CR  2010-274;  Defence  R&D  Canada  -  CORA; 
December  2010. 

Various  governments  have  claimed  that  emergency  management  and  critical  infrastructure 
protection  are  major  priorities.  The  reality  appears  rather  different  from  the  rhetoric.  A  2008  draft 
strategy  and  action  plan  for  Canada’s  critical  infrastructure  still  awaits  formal  approval.  Public 
Safety  Canada  has  been  criticized  by  the  Auditor  General  for  its  lack  of  leadership  in  coordinating 
the  efforts  of  the  various  actors  who  share  responsibility  for  critical  infrastructure  protection. 

Neither  is  there  any  consistency  in  the  identification,  regulation,  or  application  of  security 
standards  from  one  sector  to  another.  While  complex  and  emerging  threats  respect  no  boundaries, 
different  jurisdictions  in  Canada  adopt  a  variety  of  countermeasures  against  the  threats  to  national 
critical  infrastructure. 

Damage  to  or  discontinuity  of  critical  energy  infrastructure  is  likely  to  have  major  social  and 
economic  repercussions.  To  the  extent  also  that  infrastructure  forms  part  of  the  North  American 
Energy  Hemispheric  network,  political  repercussions  could  prove  more  severe  than  the  economic 
and  social  consequences  of  a  disruption.  As  a  major  energy  supplier  to  the  United  States  (U.S.), 
the  criticality  of  Canada’s  energy  infrastructure  derives  in  part  from  the  vital  contribution  which 
energy  exports  make  to  the  economic  prosperity  and  growth  of  both  Canada  and  the  United 
States.  This  mutual  dependence  needs  to  be  factored  into  any  risk  assessment. 

Continental  energy  integration  is  supported  and  sustained  by  regional  trading  arrangements  such 
as  the  North  American  Free  Trade  Agreement  (NAFTA)  and  the  Security  and  Prosperity 
Partnership  (SPP),  but  more  informal  cross-border  relationships  between  owners/operators  and 
their  industry  associations  do  much  to  facilitate  the  exchange  of  information  and  alert  warnings. 
There  may  be  a  need  for  more  bilateral  agreements  between  Canada  and  the  United  States. 

Energy  sector  products  are  highly  diverse  but  its  supply  infrastructure  is  regionally  concentrated 
and  closely  integrated  continentally  with  the  United  States.  While  the  concentration  of  energy 
assets  such  as  oil  refineries  and  gas  processing  plants  in  certain  geographic  areas  in  North 
America  reflect  the  economic  advantages  of  location,  that  density  also  presents  multiple  high- 
value  energy  targets  and  increases  the  regional  impact  of  natural  disasters.  Key  installations  are 
typically  well-protected  although  off-shore  production  platforms  may  still  be  vulnerable  to  assault 
by  sea  or  air.  Over  80%  of  energy  sector  assets  and  installations  are  privately  owned  or  operated. 

Canada’s  highly  de -centralized  structure  and  distributed  division  of  responsibilities  with  respect 
to  critical  infrastructure  has  resulted  in  disparate  strategies  for  the  protection  of  critical 
infrastructure  and  emergency  management  across  provincial  jurisdictions.  The  success  of  an 
integrated  “all-hazards”  risk  management  approach  to  security  and  emergency  management  as 
outlined  in  the  draft  strategy,  will  depend  upon  extensive  public/private  sector  partnerships 
between  the  various  actors  who  share  responsibility  for  energy  infrastructure. 
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Energy  infrastructure  is  threatened  by  ongoing  criminal  acts  of  theft,  vandalism,  public  order 
extremism  and  severe  weather  conditions  but  terrorism  and  cyber  attacks  pose  significant  risks. 
The  main  terrorist  threat  emanates  from  international  Islamist  extremism  as  epitomized  by  al- 
Qaeda,  affiliated  groups  or  homegrown  terrorists  inspired  by  jihadism.  Electronic  attacks  may  be 
perpetrated  by  widely  different  groups  or  individuals  with  various  motives.  Much  of  Canada’s 
national  critical  infrastructure  is  now  either  built  upon,  or  monitored  and  controlled  by  cyber 
information  and  communications  technologies  (ICT)  which  makes  it  vulnerable  to  electronic 
attacks  and  the  cascading  effects  of  disruptions  in  other  critical  infrastructure(s)  (Cl). 

In  the  absence  of  an  overarching  coordinating  authority,  national  infrastructure  owners  and 
operators  have  adopted  different  risk  management  methodologies.  A  lack  of  data  impedes  an 
accurate  assessment  of  the  risks  from  low  probability/high  impact  events  such  as  terrorism  or  the 
use  by  terrorists  of  weapons  of  mass  destruction.  Equally,  the  lack  of  an  accurate  measure  for  Cl 
interdependencies  means  that  assessments  regarding  the  risks  of  cascading  consequences  are 
unreliable.  In  both  cases,  an  undersupply  of  protection  may  result. 

Departmental  reorganizations  in  Canada  which  followed  the  attacks  on  9/11,  mirrored  similar 
changes  in  the  United  States.  Anti-terrorism  measures  were  adopted  in  part  to  reassure  U.S. 
sensitivities  that  its  interests  were  protected  in  Canada.  That  initial  focus  on  terrorism  gave  way 
when  new  and  emerging  global  threats  persuaded  the  Government  of  Canada  (GOC)  that  a  more 
integrated  approach  to  security  was  required.  A  defensive  focus  on  protective  measures  for 
specific  physical  assets  of  national  interest  became  just  one  of  a  number  of  measures  for  reducing 
vulnerabilities  and  assuring  critical  infrastructure  against  all  threats  and  across  all  sectors. 
National  security  risks  are  now  treated  as  one  part  of  an  integrated  ‘all-hazards’  risk  management 
system. 

Natural  Resources  Canada  (NRCan),  as  lead  line  department  for  the  Energy  sector,  has  been  pro¬ 
active  and  innovative  in  enhancing  protection  for  national  critical  energy  infrastructure  (NCI). 
While  Public  Safety  Canada  now  leads,  by  coordinating,  the  efforts  of  others  to  assure  that 
infrastructure,  NRCan  continues  to  be  a  “subject  expert”  and  supports  and  contributes  to 
initiatives  to  assure  critical  energy  infrastructure. 

The  draft  Strategy  Paper  Working  Towards  a  Strategy  and  Action  Plan  for  Critical  Infrastructure 
was  issued  in  2008  after  prolonged  discussions  with  stakeholders,  circulation  of  two  previous 
discussion  papers  and  the  formulation  of  a  National  Critical  Infrastructure  Assurance  program  in 
2002.  It  has  been  succeeded  by  the  National  Strategy  for  Critical  Infrastructure,  Ottawa  2009 
(issued  in  2010).  The  strategy  is  essentially  a  reactive  one,  responding  to  threats  rather  than 
proactively  seeking  to  prevent  and  deter  attempts  to  destroy  and  disrupt  NCI.  It  does  not  seek  to 
change  the  status  quo  (dictated  by  custom  and  constitution)  but  relies  on  the  voluntary 
participation  of  the  private  sector  in  the  proposed  integrated  system  and  on  measures  to  encourage 
more  collaboration  and  information  sharing  to  fill  security  gaps. 

The  inactivity  on  this  file — or  the  apparent  inability  of  government  to  fulfil  its  declared  aims — is 
indicative  of  a  governance  problem.  A  failure  of  direction  and  control,  or  of  relationships  among 
the  numerous  actors  involved,  is  likely  to  intensify  the  impact  of  a  national  security  or  public 
safety  incident  and  therefore  requires  attention. 
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Clarity  about  roles  and  responsibilities,  the  fostering  of  trusted  relationships  and  a  more  cohesive 
community,  a  common  commitment  to  shared  CIP  principles — including  the  “duty  to  provide” 
(information),  and  a  more  proactive  use  of  intelligence  capabilities  with  respect  to  collection  and 
analysis  will  all  be  relevant  to  creating  a  cost  efficient  and  effective  approach  to  protecting 
national  critical  infrastructure  and  assuring  the  assets  and  services  vital  to  the  well-being  of 
Canadians. 

Trans -boundary  thinking  is  required  from  the  outset  given  the  global  links  and  the 
interdependencies  which  exist  within  and  across  critical  infrastructure  sectors.  A  “containment” 
response  to  an  incident  will  not  be  adequate.  Prevention  and  planning  must  include  the 
assumption  that  there  will  be  cascading  effects  and  these  must  be  identified.  Response  strategies 
which  engage  the  whole  of  government  will  necessitate  thinking  through  all  the  inherent 
jurisdictional  and  legal  ramifications  and  developing  approaches  which  respect  the  rule  of  law  but 
are  anticipative  and  adaptive. 
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Differents  gouvernements  ont  pretendu  que  la  gestion  des  urgences  et  la  protection  des 
infrastructures  essentielles  sont  des  priorites  majeures.  La  realite  sernble  cependant  differente  de 
la  theorie.  Une  ebauche  de  strategic  et  de  plan  d'action  pour  les  infrastructures  essentielles  du 
Canada  datant  de  2008  attend  toujours  d'etre  approuvee  officiellement.  Securite  publique  Canada 
a  ete  critiquee  par  la  verificatrice  generate  pour  son  manque  de  leadership  dans  la  coordination 
des  efforts  des  differents  acteurs  se  partageant  la  responsabilite  de  la  protection  des  infrastructures 
essentielles. 

De  plus,  il  n'existe  aucune  forme  d'uniformite  dans  l'identification  des  normes  de  securite,  leur 
reglementation  ou  leur  application  d'un  secteur  a  l'autre.  Bien  que  les  menaces  emergeantes  soient 
complexes  et  qu'elles  ne  respectent  aucune  frontiere,  les  differentes  juridictions  existant  au 
Canada  ont  adopte  une  vaste  gamme  de  contremesures  pour  s'attaquer  aux  menaces  envers  les 
infrastructures  nationales  essentielles. 

II  est  probable  que  des  dommages  aux  infrastructures  energetiques  essentielles  ou  des  ruptures  de 
leurs  services  auront  d'importantes  repercussions  economiques  et  sociales.  Compte  tenu  du  fait 
que  ces  infrastructures  font  egalement  partie  du  reseau  energetique  hemispherique  nord- 
americain,  les  repercussions  politiques  pourraient  s'averer  plus  graves  que  les  consequences 
economiques  et  sociales  des  ruptures  de  service.  En  tant  qu’un  des  principaux  fournisseurs 
d'energie  des  Etats-Unis  (E.-U.),  la  criticite  des  infrastructures  energetiques  du  Canada  provient 
en  partie  de  l’apport  vital  des  exportations  d'energie  a  la  croissance  et  a  la  prosperite  economique 
du  Canada  et  des  Etats-Unis.  II  faut  tenir  compte  de  cette  interdependance  lors  de  toute  evaluation 
des  risques. 

L 'integration  continentale  en  matiere  d'energie  est  appuyee  et  assuree  par  des  ententes 
commerciales  regionales  telles  que  l'Accord  de  libre-echange  nord-americain  (ALENA)  et  le 
Partenariat  nord-americain  pour  la  securite  et  la  prosperite  (PSP),  mais  des  relations 
transfrontalieres  plus  informelles  entre  les  proprietaires/operateurs  et  leurs  associations 
industrielles  contribuent  a  grandement  faciliter  les  echanges  de  renseignements  et  les 
informations  concernant  les  alertes.  II  pourrait  etre  necessaire  de  disposer  de  davantage  d'ententes 
bilaterales  entre  le  Canada  et  les  Etats-Unis. 

Les  produits  du  secteur  de  l'energie  sont  hautement  diversifies,  mais  les  infrastructures  de 
distribution  sont  concentrees  regionalement  et,  au  niveau  continental,  elles  sont  etroitement 
integrees  a  celles  des  Etats-Unis.  La  concentration  des  actifs  energetiques  —  tels  que  les 
raffineries  de  petrole  et  les  usines  de  traitement  de  gaz  naturel  —  dans  certaines  regions 
geographiques  de  l’Amerique  du  Nord  temoigne  des  avantages  economiques  de  leur  lieu 
d’ implantation,  cette  densite  fait  toutefois  en  sorte  que  ces  regions  offrent  une  multitude  de  cibles 
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de  grande  valeur  et  augmente  les  probability  de  repercussions  regionales  en  cas  de  catastrophes 
naturelles.  Les  installations  cles  sont  habituellement  bien  protegees,  bien  que  les  plateformes  de 
production  en  mer  puissent  etre  encore  vulnerables  a  une  attaque  par  voie  aerienne  ou  maritime. 
Plus  de  80  %  des  actifs  et  installations  du  secteur  energetique  sont  detenus  ou  operes  par  des 
interets  prives . 

La  structure  grandement  decentralisee  du  Canada  et  la  repartition  des  responsabilites  en  ce  qui  a 
trait  aux  infrastructures  essentielles  a  eu  pour  resultat  la  creation  de  strategies  asymetriques  pour 
la  protection  des  infrastructures  essentielles  et  la  gestion  des  urgences  dans  les  differentes 
juridictions  provinciales.  Le  succes  d’une  approche  de  gestion  integree  tous  risques  en  matiere  de 
securite  et  de  gestion  des  urgences,  tel  que  decrite  dans  l’ebauche  de  strategic,  dependra  de 
l’etendu  des  partenariats  des  secteurs  publics/prives  entre  les  differents  acteurs  qui  partagent  la 
responsabilite  des  infrastructures  energetiques. 

Les  infrastructures  energetiques  sont  constamment  menacees  par  la  realisation  d’actes  criminels 
tels  que  le  vol,  le  vandalisme,  l’extremisme  visant  le  desordre  public  ainsi  que  par  les  conditions 
meteorologiques  particulierement  mauvaises.  Toutefois,  le  terrorisme  et  les  cyberattaques 
constituent  aussi  des  risques  importants.  La  principale  menace  terroriste  est  issue  de  l’extremisme 
islamiste  international  tel  qu’incarne  par  Al-Qaeda,  ses  groupes  affilies  ou  les  terroristes  locaux 
inspires  par  le  jihad.  Les  attaques  electroniques  peuvent  etre  perpetrees  par  des  individus  ou  des 
groupes  extremement  differents  ayant  des  motifs  tout  aussi  varies.  Les  infrastructures  nationales 
essentielles  du  Canada  sont  maintenant  pour  la  plupart  elaborees  a  partir  de  technologies  de 
l’information  et  des  communications  (TIC)  ou  elles  sont  controlees  ou  surveillees  par  de  telles 
TIC,  ce  qui  les  rend  vulnerables  aux  attaques  electroniques  et  aux  effets  domino  de  rupture  de 
service  dans  les  autres  infrastructures  essentielles  (IE). 

En  L  absence  d’une  autorite  de  coordination  globale,  les  proprietaries  et  operateurs 
d’ infrastructures  nationales  ont  adopte  differentes  methodologies  de  gestion  du  risque.  Le  manque 
de  donnees  ne  permet  pas  de  faire  une  evaluation  precise  des  risques  poses  par  des  evenements  de 
faible  probability  et  grandes  repercussions,  tels  que  le  terrorisme  ou  l’utilisation  par  des  terroristes 
d’armes  de  destruction  massive.  De  meme,  L  absence  de  mo  yen  de  mesure  precis  permettant 
d’evaluer  les  interdependances  des  IE  signifie  que  les  evaluations  portant  sur  les  possibility 
d’ effets  domino  que  ces  incidents  pourraient  entrainer  ne  sont  pas  fiables.  Dans  les  deux  cas,  la 
situation  pourrait  entrainer  une  penurie  de  protection. 

Les  reorganisations  ministerielles  qui  ont  eu  lieu  au  Canada  a  la  suite  des  evenements  du 
1 1  septembre  etaient  le  reflet  des  changements  similaires  qui  se  sont  produits  aux  Etats-Unis.  Des 
mesures  antiterrorismes  ont  ete  adoptees  en  partie  pour  calmer  les  sensibilites  americaines 
touchant  la  protection  de  ses  interets  au  Canada.  Cette  approche  initiale  face  au  terrorisme  a  fait 
place  a  une  autre  lorsque  de  nouvelles  menaces  globales  ont  emerge  et  ainsi  persuade  le 
gouvernement  du  Canada  (GC)  qu'une  approche  plus  integree  en  matiere  de  securite  etait 
necessaire.  Une  approche  defensive  en  matiere  de  mesures  de  protection  dans  le  cas  de  certains 
biens  materiels  d’interet  national  est  devenue  une  des  mesures  permettant  de  reduire  les 
vulnerability  et  d’ assurer  la  protection  des  infrastructures  essentielles  contre  toutes  les  menaces 
dans  toutes  les  regions.  Les  risques  pour  la  securite  nationale  sont  maintenant  traites  comme  un 
element  d’un  systeme  de  gestion  integree  tous  risques  en  matiere  de  securite. 
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Ressources  naturelles  Canada  (RNCan),  en  tant  que  ministere  responsable  jouant  le  role  de  chef 
de  file  dans  le  domaine  de  l’energie,  a  agi  de  faqon  proactive  et  innovatrice  en  ameliorant  la 
protection  des  infrastructures  energetiques  nationales  essentielles  (IENE).  Bien  que  Securite 
publique  Canada  tienne  maintenant  ce  role  de  chef  de  file  en  assurant  la  coordination  des  efforts 
de  tous  pour  la  protection  de  ces  infrastructures,  RNCan  demeure  un  «  specialiste  en  la  matiere  » 
et  continue  d’appuyer  et  de  contribuer  aux  initiatives  visant  a  assurer  la  protection  des 
infrastructures  energetiques  essentielles. 

L’ebauche  du  document  strategique  intitule  «  Elaboration  d’une  Strategie  nationale  de  protection 
des  infrastructures  essentielles  et  d’un  plan  d’ action  connexe  »  a  ete  publiee  en  2008  apres  des 
discussions  prolongees  avec  les  intervenants,  la  circulation  des  deux  documents  de  travail 
precedents  et  l’elaboration  d’un  Programme  national  de  fiabilite  des  infrastructures  essentielles  en 
2002.  Le  document  « Strategie  nationale  sur  les  infrastructures  essentielles  »,  Ottawa  2009 
(publie  en  2010)  a  ete  publie  par  la  suite.  II  s’agit  essentiellement  d’une  strategie  reactive, 
repondant  aux  menaces  plutot  que  cherchant  de  faqon  proactive  a  les  prevenir  et  a  dissuader  les 
tentatives  de  destruction  et  d’ interruption  de  service  des  IENE.  Elle  ne  cherche  pas  a  changer  le 
statu  quo  (dicte  par  les  coutumes  et  la  constitution);  elle  compte  plutot  sur  la  participation 
volontaire  du  secteur  prive  dans  le  systeme  integre  propose  et  sur  des  mesures  visant  a  encourager 
davantage  de  collaboration  et  de  partage  d’information  afin  de  reduire  les  lacunes  en  matiere  de 
securite. 

L’ inactivity  dans  ce  dossier — ou  l’apparente  incapacity  du  gouvernement  a  remplir  ses  objectifs 
declares — est  revelateur  d’un  probleme  de  gouvernance.  II  est  probable  qu’un  manque  de 
direction  et  de  controle,  ou  des  problemes  a  etablir  de  relations  entre  les  differents  acteurs 
impliques,  aurait  de  plus  grandes  consequences  advenant  un  incident  au  niveau  de  la  securite 
nationale  ou  publique.  II  est  done  necessaire  d’y  preter  attention. 

La  clarification  des  roles  et  responsabilites,  1’ encouragement  a  creer  des  relations  de  confiance, 
une  communaute  plus  cohesive,  un  engagement  commun  envers  les  principes  partages  en  matiere 
de  protection  des  IE — y  compris  1’ obligation  de  fournir  des  renseignements  et  une  utilisation  plus 
proactive  des  capacites  de  renseignement  en  ce  qui  a  trait  a  la  cueillette  et  1’ analyse  des  donnees, 
tout  cela  sera  permettra  de  mettre  sur  pied  une  approche  economique  et  efficace  en  matiere  de 
protection  des  infrastructures  nationales  essentielles  et  a  assurer  les  actifs  et  les  services  vitaux  au 
bien-etre  des  Canadiens. 

Compte  tenu  des  liens  mondiaux  et  des  interdependances  qui  existent  au  sein  et  entre  les 
differents  secteurs  des  infrastructures  essentielles,  il  faut  faire  usage  des  le  depart  a  une  reflexion 
transfrontaliere.  Une  reaction  de  « confinement  »  a  un  incident  ne  sera  pas  adequate.  La 
prevention  et  la  planification  doivent  inclure  l’hypothese  qu’il  y  aura  des  effets  domino  et  ceux-ci 
doivent  etre  identifies.  Des  strategies  d’ intervention  pangouvernementale  exigeront  une  reflexion 
tenant  compte  de  toutes  les  ramifications  juridictionnelles  et  legale  inherentes  et  la  mise  au  point 
d’approches  qui  respectent  la  primaute  du  droit  tout  en  etant  capable  d’anticiper  et  de  s’adapter. 
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1  Introduction 


When  Canada’s  Minister  of  Natural  Resources  addressed  the  annual  conference  of  the 
International  Pipeline  Security  Forum  in  Ottawa  in  October,  2007  he  noted  that  Canada  had 
become  an  energy  superpower  and  a  major  supplier  of  energy  to  the  United  States.  As  such,  and 
given  the  vital  importance  of  its  exports  to  the  economic  growth,  security,  and  prosperity  of  both 
countries,  Canada  must  also,  he  said,  be  a  dependable  supplier.  The  protection  and  resilience  of 
critical  infrastructure  have  often  been  described  as  major  priorities  for  the  government,  yet  the 
reality  appears  rather  different  from  the  rhetoric. 

Damage  to  or  destruction  of  any  critical  infrastructure  which  seriously  affects  the  safety,  security, 
health  and  economic  well-being  of  Canadians  across  the  country  becomes  a  matter  of  national 
security.  The  mutual  reliance  of  both  Canada  and  the  U.S.  on  cross-border  transfers  of  energy 
supplies  (oil,  gas  and  electricity)  means  that  serious  disruptions  are  likely  to  have  political 
repercussions  with  respect  to  North  American  integration,  as  well  as  having  economic  and  social 
consequences  and  undermining  public  confidence  in  the  ability  of  government  to  protect  core 
national  interests. 

Primary  responsibility  for  protecting  critical  infrastructure  rests  with  the  owners  and  operators, 
but  custom  and  constitutional  law  grant  jurisdictional  authority  to  the  provinces  and  territories  for 
legislating  and  regulating  infrastructure  within  their  boundaries.  Together,  they  will  select 
whatever  protective  measures  they  deem  appropriate.  However,  it  is  a  shared  responsibility  which 
involves  a  multiplicity  of  other  actors  including  first  line  responders,  municipalities, 
industry/business  associations,  regulators  and  federal  line  departments.  While  some  emergencies 
can  be  handled  locally  by  private  sector  owners/operators,  municipalities  or  provinces,  the  federal 
government  will  assist  when  requested,  when  the  emergency  transcends  jurisdictional  boundaries, 
or  when  its  assistance  is  in  the  national  interest.  The  role  of  the  federal  government  is  therefore 
limited  and  must  currently  be  negotiated  against  a  backdrop  of  jurisdictional  ambiguities,  tensions 
and  sovereignty  sensitivities. 

This  highly  de -centralized  structure  and  distributed  division  of  responsibilities  means  that 
protection  of  critical  infrastructure  and  emergency  management  varies  across  jurisdictions:  there 
are  currently  no  consistent  cross-Canada  strategies  or  standards,  nor  have  the  assets  and  facilities 
which  are  critical  to  the  government  yet  been  determined.1 

While  the  federal  government  is  apparently  committed  to  the  development  of  a  more 
collaborative  emergency  management  framework  and  has  drafted  a  strategy  and  action  plan  for 
Canada’s  critical  infrastructure,2  this  has  not  yet  been  formally  approved  although  officials  are 
working  towards  its  implementation. 


1  “Emergency  Management-Public  Safety  Canada,”  Chapter  7  in  Office  of  the  Auditor  General  of  Canada, 
Report  of  the  Auditor  General  of  Canada  to  the  House  of  Commons  (Ottawa:  Autumn  2009),  p.  22. 

2  Public  Safety  Canada,  “Working  Towards  a  National  Strategy  and  Action  Plan  for  Critical  Infrastructure,” 
2008.  http://www.publicsafetv.gc.ca/prg/em/ci/strat-part2-eng.aspx,  accessed  on  29  March  2010. 
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Critical  infrastructure  protection  (CLP)  refers  to  measures  which  aim  to  ensure  the  availability, 
integrity  and  confidentiality  of  the  physical  and  cyber  assets,  systems  and  services  which  support 
the  nation’s  critical  infrastructure  (Cl). 

This  study  will  look  at  the  characteristics  of  the  energy  sector  with  respect  to  threats, 
vulnerabilities  and  risks,  before  examining  how  the  government  of  Canada  (GOC)  has  responded 
to  emerging  threats;  current  and  proposed  government  policy  with  respect  to  Canada’s  critical 
infrastructure;  and  the  governance  framework  which  is  in  place  to  implement  that  policy.  The 
study  concludes  with  a  brief  comment  on  concerns  raised  in  connection  with  an  ‘all-hazards’  risk 
management  approach  to  critical  energy  infrastructure  protection,  including  the  need  for  a  more 
pro-active  strategy. 
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2  Critical  National  Infrastructure  Defined 


While  the  term  “energy  security”  is  sometimes  used  to  refer  to  the  reliability  of  energy  supply, 
the  International  Energy  Authority  (IEA)  noted  in  a  study  of  natural  gas,  that  energy  security  is 
threatened  not  only  by  political  and  economic  factors  but  “technical”  factors  i.e.  those  “which 
involve  accidents,  terrorism  or  natural  catastrophes.”3  Energy  installations  and  assets  are  therefore 
of  national  interest  because  technical  and  infrastructural  reasons  can  both  cause  and  aggravate  the 
impact  of  large  fluctuations  in  supply. 

The  term  “critical  infrastructure”  is  used  to  describe  various  categories  of  vital  assets  and 
services,  the  destruction  or  discontinuance  of  which  would  have  serious  repercussions  for  the 
owners  and  operators.  The  nature  of  the  assets  in  the  various  sub-categories  will  have  a  bearing 
on  the  strategies  adopted  to  protect  them  and  how  and  to  whom  that  responsibility  is  allocated.  If 
destruction  or  disruption  of  certain  infrastructure  is  expected  to  seriously  impact  upon  the 
economic  and  social  welfare  of  a  nation,  the  effective  functioning  of  governments,  or  the  health, 
safety  and  security  of  its  citizens,  the  criticality  is  such  as  to  be  of  national  interest  and  such 
infrastructure  is  described  by  many  countries  as  comprising  the  critical  national  infrastructure 
(CNI).4 

That  term — critical  national  infrastructure — is  not  currently  used  by  Canadian  federal  authorities 
who  define  critical  infrastructure  as  consisting  of  the  “processes,  systems,  facilities,  technologies, 
networks,  assets  and  services  essential  to  the  health,  safety,  security  or  economic  well-being  of 
Canadians  and  the  effective  functioning  of  government.  Disruptions  of  this  critical  infrastructure 
could  result  in  catastrophic  loss  of  life,  adverse  economic  effects,  and  significant  harm  to  public 
confidence.”5 

The  draft  national  strategy  and  action  plan  for  critical  infrastructure6  does  not  appear  to 
differentiate  between  the  critical  infrastructure  which  collectively  exists  across  Canada,  and 
infrastructure  which  is  critical  to  national  interests.7  Whether  this  is  a  matter  of  sovereignty  or 
semantics,  Public  Safety  Canada,  the  lead  federal  department,  describes  its  own  role  in  terms  of 
being  one  among  many  working  to  protect  critical  infrastructure  and  collaborating  with  others  to 
enhance  the  effectiveness  of  that  effort. 


3  International  Energy  Agency,  The  IEA  Natural  Gas  Security  Study  (Paris:  IEA/OECD,  1995),  p.  23. 

4  UK  CPM  Glossary:  “CNI — Critical  National  Infrastructure...  the  loss  or  compromise  of  which  would 
have  a  major  detrimental  impact  on  the  availability  or  integrity  of  essential  services,  leading  to  severe 
economic  or  social  consequences  or  to  loss  of  life.  These  critical  elements  of  infrastructure  comprise  the 
nation’s  critical  national  infrastructure.” 

5  Public  Safety  Canada,  Emergency  Management  Planning  Guide  2010-201 1,  accessed  on  6  December 
2010  at  http://www.publicsafety.gc.ca/prg/em/emp/emp-2010-l  1-eng.aspx.  Note:  This  definition  accords 
closely  with  that  contained  in  EU,  Critical  Infrastructure  Protection  in  the  fight  against  terrorism, 
COM(2004)  702  final.  Communication  from  the  Commission  to  the  Council  and  the  European  Parliament, 
Brussels,  Belgium,  2004,  a  document  which  does  use  the  term  CNI. 

6  “Working  Towards  a  National  Strategy  and  Action  Plan  for  Critical  Infrastructure.” 

7  The  terms  “Canada’s  national  critical  infrastructure”  and  (protecting)  “Canada’s  critical  infrastructure,” 
are  used. 
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Critical  infrastructure  in  Canada  is  categorized  into  ten  sectors:  (1)  Energy  and  Utilities;  (2) 
Communications  and  Information  Technology;  (3)  Finance;  (4)  Health  Care;  (5)  Food;  (6)  Water; 
(7)  Transportation;  (8)  Safety;  (9)  Government;  and,  (lO)Manufacturing.  These  sectors  are  further 
divided  into  sub-sections.  Energy  and  Utilities,  for  example,  is  divided  into  electric  power,  natural 
gas  and  oil  production,  and  transmission  systems.  “Electric  power”  includes  power  generation 
plants,  transmission  stations,  power  line  corridors  (or  transmission  lines),  distribution  stations, 
control  stations  and  nuclear.  These  categories  remain  unchanged  from  those  in  an  earlier 
“Position”  paper  which  was  published  in  2005s  to  stimulate  debate  among  public  and  private 
sector  stakeholders  about  a  strategy  for  critical  infrastructure.  (See  Annex  A). 


Public  Safety  and  Emergency  Preparedness  Canada,  “Government  of  Canada  Position  Paper  on  a 
National  Strategy  for  Infrastructure  Protection”  (Ottawa:  November  2004,  released  in  2005). 
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3  Characteristics  of  Canada’s  Energy  Infrastructure 
Sector 


Canada  is  richly  endowed  with  natural  energy  resources.  In  2009,  the  value  of  total  energy 
exports  was  $327.9  billion.  Canada  is  the  largest  foreign  supplier  to  the  United  States  of  oil, 
natural  gas,  electricity  and  uranium,  exporting  more  than  $125  billion  annually.9  The  products 
and  services  delivered  by  critical  energy  infrastructure  contribute  significantly  to  Canada’s 
National  Income,  employment,  economic  activity  and  growth. 

3.1  Continental,  Concentrated  and  Diverse 

Most  of  Canada’s  critical  energy  infrastructure  is  owned  or  operated  by  the  private  sector  or 
provincial/territorial  levels  of  government.10  It  is  geographically  dispersed  and  regionally 
concentrated.  A  major  proportion  of  oil  and  natural  gas  production  is  in  Alberta;  Saskatchewan  is 
rich  in  uranium;  while  Ontario,  New  Brunswick  and  Quebec  are  nuclear  power  producers.  Over 
time,  component  parts  have  become  deeply  embedded  in  the  distinctive  history  and  culture  of  the 
regions  in  which  they  are  situated.  Much  of  it  is  connected  to  international  networks  since  the 
energy  sector  is  particularly  likely  to  be  operating  in  a  global  environment  which  is  neither 
defined  nor  limited  by  jurisdictional  or  geographic  boundaries. 

The  infrastructure  required  to  produce,  process,  deliver  and  consume  energy  in  Canada  is  diverse 
and  complex.  It  includes  oil  pipelines  and  interconnected  electricity  grids  as  well  as  ships  which 
deliver  coal  for  electrical  generators.  Extensive  networks  of  pipelines  and  power  grids  transmit 
oil,  natural  gas  and  electricity  from  points  of  production  to  consumers  and  user  industries  across 
Canada,  the  United  States  and  Mexico.  They  cross  remote  territory  as  well  as  densely  populated 
regions  and,  as  a  consequence,  are  vulnerable  to  accident  and  malicious  acts. 

Energy  is  a  leading  sector  in  the  regional  economies  of  Alberta,  Newfoundland  and  Labrador,  and 
Saskatchewan.  Arctic  oil  and  gas  reserves  may  become  important  in  the  future  as  a  means  to 
boost  supply.11  The  activities  of  the  sector  encompass  the  production,  refining  and  delivery  of 
petroleum  and  natural  gas,  and  the  generation  of  electric  power  from  hydro,  oil,  gas,  coal  and 
nuclear  power  plants.  These  energy  resources  are  vital  for  interdependent  industries,  commercial 
facilities,  public  and  social  services,  and  household  requirements. 

Canada  is  a  part  of  a  North  American  energy  economy  which  is  closely  integrated  continentally 
with  the  United  States,  connectivity  being  maintained  by  pipeline  networks,  electricity  grids  and 


9  D.H.  Burney,  “Pipeline  Security,  Energy  Security  and  Economic  Resilience,”  paper  given  at  the 
International  Pipeline  Security  Forum,  Ottawa,  October  2009  subsequently  published  online  as  “Pipelines, 
Energy,  Economy,”  Global  Brief,  17  November  2009,  accessed  at  http://globalbrief.ca/?s=Derek+Burney. 

10  The  Hon.  Gary  Lunn,  P.C.,  M.P.  Minister  of  Natural  Resources  in  a  speech  to  the  2007  International 
Pipeline  Security  Forum,  Ottawa,  Ontario  said  that  85  percent  of  Canadian  energy  infrastructure  was 
privately  owned. 

Peter  F.  Johnston,  “Arctic  Energy  Resources  and  Global  Energy  Security,”  Journal  of  Military  and 
Strategic  Studies,  Vol.  12,  No.  2,  2010. 
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extensive  commercial  interactions  among  operators  in  the  industry.12  Canada’s  system  of 
transmission  pipelines  for  oil  and  gas  extends  for  80,000  kilometers  and  is  connected  to  345,000 
kilometers  of  local  distribution  pipelines.  An  electricity  grid  operates  in  an  integrated  fashion  to 
satisfy  peak  demands  on  either  side  of  the  border.  Growing  US  demand  for  Canadian  oil  and 
natural  gas  over  recent  decades,  led  to  the  expansion  of  this  North  American  pipeline  network  and 
the  interconnectedness  of  gas  grids  as  Canadian  supplies  formed  an  increasing  share  of  total  U.S. 
demand.  In  2008,  Canada  exported  2  million  barrels  (bbls)  per  day  of  crude  oil  to  the  U.S.  With 
the  expected  2  million  bbls/day  rise  in  Canadian  crude  production  by  2020,  most  of  which  will  be 
available  for  export,  U.S.  net  imports  from  Canada  could  well  rise  to  over  4  million  bbls/day  of 
crude  oil.13 

By  2006  Canada  had  become  the  single  largest  international  supplier  of  oil  and  natural  gas  to  the 
United  States.  In  2008,  its  crude  oil  exports  to  the  U.S.  were  valued  at  US$64  billion.  A  large 
proportion  of  Western  Canada’s  crude  oil  production  is  heavy  oil  or  bitumen  which  most 
Canadian  refineries  cannot  process.  The  ability  to  export  heavy  crude  oils  to  suitable  U.S 
refineries  is  advantageous  both  to  the  Canadian  producer  and  the  American  consumer. 

These  energy  exports  are  vital  to  the  security  and  economic  prosperity  of  both  countries  and  are 
likely  to  grow  further  with  increased  oil-sands  production,  the  addition  of  more  crude  oil, 
northern  gas  pipelines  and  liquefied  natural  gas  (LNG)  facilities.14  Continental  energy  integration 
is  supported  and  sustained  by  regional  trading  arrangements  such  as  the  North  American  Free 
Trade  Agreement  (NAFTA)  and  the  Security  and  Prosperity  Partnership  (SPP).  In  March  2001, 
the  energy  ministers  of  Canada,  Mexico  and  the  United  States  met  to  discuss  a  common  energy 
strategy  which  included  integration  of  their  power  grids.  Considerable  reciprocity  already  existed 
between  the  electric  power  sectors  of  Canada  and  the  U.S.  although  the  connectivity  between 
Mexico  and  the  United  States  is  more  limited  comprising  Mexican  exports  of  oil  to  the  U.S. A.  in 
return  for  gas. 

3.2  Private  Ownership/Muitiple  Actors 

Private  ownership  of  Canada’s  energy  infrastructure  can  be  beneficial  in  that  market  forces  tend 
to  create  the  redundancies  and  duplications  necessary  for  coping  with  disruptions,  but  competition 
also  encourages  businesses  to  invest  in  diverse  security  and  business  resilience  solutions.  This 
creates  a  fragmented  security  and  resilience  landscape  which  may  have  weak  links  because  of  a 
lack  of  consistency  within  and  across  sectors.  Owners  and  operators  and  their  provincial 
regulators  are  responsible  for  day  to  day  protective  measures  and  ongoing  risk  assessments  but 
CLP  is  a  shared  responsibility  among  a  multiplicity  of  stakeholders,  including  various  tiers  of 
government,  industry/business  associations,  standardization  bodies,  regulators,  and  other 
jurisdictional  authorities.  An  effective  strategy  requires  all  of  them  to  participate  fully  since  no 
one  body  alone  can  provide  the  necessary  level  of  protection.  While  the  scope  for  federal 
intervention  is  limited,  some  overarching  body  is  needed  to  coordinate  the  efforts  of  all. 


12  In  April,  2001,  Canada,  Mexico  and  the  United  States  established  a  North  American  Energy  Working 
Group  to  enhance  energy  trade  within  the  common  economic  space,  and  to  foster  cooperation  in 
hemispheric  energy  issues,  infrastructure  and  technologies:  North  American  Energy  Working  Group,  North 
America — The  Energy  Picture ,  June  2002. 

13  Burney,  “Pipeline  Security,  Energy  Security  and  Economic  Resilience.” 
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3.3  Dependencies  and  interdependencies 


The  term  Dependency,  describes  how  one  product  or  service  affects  another;  an  interdependency 
refers  to  the  mutual  (though  usually  unequal)  dependency  of  products  or  services.  With  respect  to 
critical  infrastructure,  these  are  the  physical  and  electronic  (cyber)  linkages  within  and  among  the 
ten  critical  infrastructure  sectors  defined  by  the  federal  government  as  national.  In  order  to 
identify  the  direct  and  indirect  infrastructure  linkages  which  support  critical  facilities,  owners  and 
operators  need  “situational  awareness,”  i.e.,  a  detailed  understanding  of  organizational  functions, 
internal  infrastructures  and  how  these  link  to  external  infrastructures. 

Producers  within  the  energy  sector  are  dependent  upon  one  another  to  varying  degrees.  As  an 
example,  oil  supply  is  highly  dependent  upon  electrical  supply  because  refineries,  oil  pipelines 
and  service  station  pumps  need  electric  power  for  operation.  Dependencies  also  exist  between 
sectors:  road  and  rail  transport,  for  example,  is  critical  in  moving  energy  products  to  consumers 
and  the  Atlantic  offshore  industry  relies  on  coastal  shipping  for  access  to  drilling  platforms  and 
tankers  to  access  and  remove  production  to  market.  These  dependencies  can  lead  to  disruptions 
which  have  serious  commercial  consequences  for  the  owners  and  operators.  However,  the  energy 
sector  is  also  characterized  by  interdependencies  which  arise  in  large  part  because  of  a  heavy 
reliance  on  information  systems  and  communications  technologies.  Much  of  Canada’s  critical 
energy  infrastructure  and  processes  are  today  managed  remotely  from  central  control  rooms 
which  use  computers  and  communications  networks  to  control  the  flow  of  energy  supplies  (gas, 
oil,  electricity)  through  pipelines  or  grids.  The  use  of  computer-based  supervisory  control  and 
data  acquisition  (SCADA)  information  managements  systems  and  the  complex  web  of  cyber 
connections  which  link  energy  infrastructure,  means  that  a  disruption  in  one  system  can  quickly 
spread  to  others. 

The  vulnerabilities  inherent  in  these  dependencies  became  apparent  in  August  2003  when  an 
estimated  50  million  people  across  eight  States  and  the  Canadian  province  of  Ontario  were  left 
without  electrical  power  after  a  utility  in  Ohio  experienced  problems  that  began  a  chain  reaction 
of  events  leading  to  power  outages  lasting,  in  some  places,  several  days.  This  incident,  known  as 
the  “Northeast  Blackout  of  2003,”  cost  roughly  $6  billion  and  caused  at  least  265  power  plants 
temporarily  to  shut  down.15 

3.4  The  Vulnerabilities 

Given  its  diversity  and  complexity,  Canada’s  energy  infrastructure  is  vulnerable  to  disruption 
from  many  sources.  The  vulnerabilities  are  as  varied  as  the  systems:  for  example,  thermal 
electricity  generators  rely  on  a  constant  and  secure  supply  of  feedstock  to  function  efficiently, 
while  hydro-electric  production  can  be  threatened  by  prolonged  drought. 

Energy  infrastructures  operate  on  a  national  and  global  scale  and  require  comprehensive  actions 
to  keep  them  viable.  Dislocation  can  come  about  as  a  result  of  failures,  natural  disasters  or  hostile 
action.  The  information  needed  to  counter  common  threats  and  reduce  vulnerabilities  will  vary 


15  U.S-Canada  Power  System  Outage  Task  Force,  “Final  Report  on  the  August  14,  2003  Blackout  in  the 
United  States  and  Canada:  Causes  and  Recommendations,”  April  2004. 
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between  infrastructures  because  of  the  nature  of  their  different  assets.  Nevertheless,  common 
principles  of  security  and  emergency  management  apply  to  all.  The  likelihood  of  disruption  can 
be  reduced  and  the  consequences  mitigated,  through  measures  that  focus  at  least  some  resources 
on  key  vulnerabilities.  The  core  problem  is  to  find  those  nodes  and  connectors  that  drive  critical 
infrastructures  of  national  significance. 

Critical  energy  infrastructure  systems  comprise  many  different  companies  and  organizations 
which  are  linked  to  each  other  electronically  within  the  sector  and  to  other  Cl  sectors  through 
information  systems.  Reliance  on  SCADA  technologies  further  increases  vulnerability  to  network 
failures  and  electronic  attacks  making  the  energy  sector  as  a  whole  very  vulnerable.  Cyber  attacks 
may  be  launched  to  obtain  or  corrupt  information,  disrupt  services  or  plan  further  attacks  on 
infrastructure.  The  availability  and  integrity  of  those  systems  and  the  information  transmitted  is 
highly  dependent  on  good  physical,  personal  and  technical  protective  security  procedures. 

Such  interdependencies  increase  the  likelihood  that  security  incidents  will  have  a  more  intense 
and  wider  impact  as  the  consequences  cascade  across  one  or  more  infrastructure  systems  and 
sectors.  Critical  infrastructure  is  particularly  vulnerable  when  it  crosses  boundaries  and  borders 
because  it  is  precisely  in  such  circumstances  that  jurisdictional  regulations  and  security  standards 
diverge,  and  issues  relating  to  direction,  control  and  accountability  are  most  obscure. 

Oil  and  natural  gas  wells  are  vulnerable  to  malicious  attacks  but  have  some  protection  by  virtue 
of  being  dispersed  and  located  in  remote  areas.  Pipelines  and  transmission  systems  are  inherently 
difficult  to  protect  and  especially  vulnerable  to  sabotage,  but  they  are  considered  minor  strategic 
targets  compared  to  critical  energy  installations  and  physical  protective  measures  and  system 
redundancy16  can  mitigate  the  risks  to  pipelines  so  that  damage  does  not  result  in  a  major 
interruption  of  supply. 

High-value  energy  assets  which  are  geographically  concentrated  such  as  oil  refineries,  gas 
processing  plants  and  offshore  platforms,17  are  more  vulnerable  to  large-scale  disruption.  These 
installations  are  typically  well-protected  although  off-shore  production  platforms  may  still  be 
vulnerable  to  assault  by  sea  or  air.  The  concentration  of  energy  assets  in  certain  geographic  areas 
in  North  America  reflect  the  economic  advantages  of  location  but  density  also  presents  multiple 
high-value  targets  for  terrorist  attacks  and  is  likely  to  increase  the  regional  impact  of  natural 
disasters.  The  destruction  of  much  of  the  oil  and  gas  infrastructure  in  and  adjacent  to  the  Gulf  of 
Mexico  during  Hurricanes  Katrina  and  Rita  in  2005  illustrates  the  point. 

Energy  infrastructure  tends  to  have  a  long  life  span.  The  location  of  particular  physical 
components  in  a  community  are  often  considered  undesirable,  (“the  nimby”  syndrome)  therefore 
new  installations  are  often  erected  in  the  same  location  as  previous  structures  even  though  sites 
selected  years  ago  may  not  be  best  suited  to  the  prevailing  economic  and  natural  environmental 
conditions. 


16  Gal  Luft,  “Pipeline  Sabotage  is  Terrorists’  Weapon  of  Choice,”  Energy  Security,  28  March  2005. 
http://www.iags.org/n0328051.htm,  accessed  on  29  March  2010. 

17  Paul  Parfomak,  “Vulnerability  of  Concentrated  Critical  Infrastructure:  Background  and  Policy  Options,” 
CRS  Report  for  Congress  RL  33206  (Washington  D.C:  Library  of  Congress,  Congressional  Research 
Service,  21  December,  2005),  p.  4. 
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There  are  many  different  methodologies  for  assessing  vulnerabilities  but  owners  and  operators  are 
likely  to  be  using  either  a  qualitative  methodology  such  as  a  risk  matrix  which  identifies 
vulnerabilities  and  categorizes  assets,  sites  or  systems  into  discrete  levels  of  risk,  or  a  quantitative 
methodology  which  computes  risk  as  a  function  of  the  threat,  probability  and  consequences  of  an 
event  or  attack. 

The  likelihood  of  dislocations  can  be  reduced  and  the  consequences  mitigated  through  measures 
that  reduce  vulnerabilities  by  strengthening  the  robustness  and  resilience  of  buildings, 
installations  and  equipment  against  attacks  or  natural  events.  For  example,  site  hardening 
measures  (increasing  the  robustness  of  the  electric  power  grid);  planning  some  redundancy  in 
order  to  reduce  the  number  of  single  points  of  failure  (additional  generator  or  alternative 
pipelines);  improved  modeling  capability  so  as  to  better  understand  the  downstream  and 
cascading  effects  of  systemic  failures;  correcting  technical  problems  when  they  occur.  The  core 
problem  is  to  find  those  nodes  and  connectors  that  drive  critical  infrastructures  of  national 
significance  and  provide  additional  protection. 

3.5  Impact  of  Loss  of  Assurance 

International  travel,  the  interconnectedness  of  communications  and  state-of-the-art  electronic  and 
digital  information  systems  are  shrinking  the  world  to  such  an  extent  that  emerging  human- 
induced  threats  are  likely  to  spread  more  rapidly  and  have  a  more  intense  impact  than  was  once 
the  case  with  respect  to  threats  to  energy  infrastructure. 

The  Canadian  energy  industry  possesses  a  high  degree  of  criticality  for  the  national,  provincial 
and  local  economies,  for  consumers  and  user  industries,  and  for  public  well-being  generally.  Oil, 
natural  gas,  and  electricity  production  are  operating  with  little  if  any  spare  capacity  or 
redundancy.  A  sudden  loss  of  production  capacity  caused  by  a  terrorist  attack  on  a  “choke”  point, 
a  technical  failure,  or  any  other  cause,  would  bring  about  immediate  shortages  of  supply.  Aside 
from  price  spikes,  an  interruption  in  natural  gas  supply  or  electricity  for  several  days  would 
impact  on  systems  as  varied  as  food,  education  and  government  services  as  well  as  the  health  and 
safety  of  citizens — for  example,  those  affected  by  inadequate  heating  in  winter  or  air-conditioning 
in  summer. 

Interdependencies  and  infrastructure  shared  in  common  with  the  U.S.  mean  that  disruptions  can 
affect  the  economic  prosperity  and  inflict  severe  hardships  not  only  upon  Canadian  citizens  but 
their  American  counterparts.  The  estimated  costs  of  the  2003  electric  blackout  were  between 
US$4- 10  billion.18  In  Canada,  gross  domestic  product  (GDP)  was  down  0.7  percent  in  August; 
there  was  a  net  loss  of  18.9  million  work  hours;  and  manufacturing  shipments  in  Ontario  were 
reduced  by  $2.3  billion.19  The  political  repercussions  of  such  an  event  could  well  prove  to  be  of 
greater  importance  than  the  economic  consequences  if  such  events  shift  from  being  extraordinary 
to  an  increased  frequency.  A  major  loss  of  public  confidence  is  likely  to  ensue  if  citizens  feel  that 


18  U.S-Canada  Power  System  Outage  Task  Force,  “Final  Report  on  the  August  14,  2003  Blackout.” 
Section  4. 

19  Statistics  Canada,  Gross  Domestic  Product  by  Industry,  August  2003,  Catalogue  No.  15-001;  September 
2003  Labour  Force  Survey;  Monthly  Survey  of  Manufacturing,  August  2003,  Catalogue  No.  31-001. 
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such  occurrences  are  attributable  to  the  inability  or  unwillingness  of  government  to  protect  assets 
critical  to  their  interests. 

Canada’s  dependence  upon  the  free-flow  of  goods,  services  and  people  across  the  border  means 
that  such  a  loss  of  assurance  can  quickly  ignite  cross-border  tensions  and  precipitate  U.S.  actions 
which  may  be  detrimental  to  Canadian  interests.  While  the  2003  blackout  was  not  attributable  to 
any  Canadian  failure,  it  did  highlight  the  degree  of  mutual  dependency  in  terms  of  power 
generation  and  the  need  for  both  countries  to  commit  to  joint  measures  to  enhance  the  security  of 
energy  transmission  facilities.  The  blackout  might  have  been  averted,  according  to  the  Task  Force 
Report20  if  the  North  American  Energy  Research  Corporation  (NERC)  had  been  invested  with 
more  independent  authority  (from  the  industry  it  represents)  to  develop  strong  reliability 
standards  and  enforce  compliance. 


20  “Final  Report  on  the  August  14,  2003  Blackout.” 
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4  The  Threats— “All  Hazards” 


The  national  infrastructure  faces  a  wide  range  of  physical  threats:  attacks  by  terrorists  and  other 
extremists,  technical  faults  or  failure  of  infrastructure,  accidents  involving  hazardous  materials, 
criminality  (theft  of  equipment,  materials,  extortion,  vandalism),  industrial  espionage  and  extreme 
weather,  i.e.,  flooding  or  hurricanes.  Certain  threats  are  short  term  events  such  as  natural 
disasters,  but  others  such  as  the  depletion  of  oil  and  gas  resources  are  long-term  trends.  In 
addition,  there  are  growing  cyber  threats  from  criminals,  foreign  agents,  disgruntled  employees 
and  hackers. 

Historically,  planning  and  protective  measures  to  secure  national  critical  infrastructure  in  Canada 
have  been  premised  on  key  infrastructure  sites  being  targets  for  malicious  attacks — terrorism, 
theft,  vandalism,  and  commercial  espionage — against  which  physical  measures  to  secure  sites  and 
equipment  were  the  deterrents.  Otherwise,  vulnerabilities  were  assessed  from  the  perspective  of 
incident  response  and  consequence  management  under  the  incident  category  “all  hazards” 
traditionally  associated  with  safety  and  emergency  management  responses  to  flooding  and  other 
natural  disasters  rather  than  national  security  threats. 

Little  emphasis  was  given  in  Canada  to  the  threat  from  terrorism  until  the  9/1 1  attacks  in  the  U.S. 
which  shifted  attention  from  responding  to  emergency  incidents  towards  preventing  terrorism  and 
protecting  critical  infrastructure  against  terrorist  attacks.  As  time  progressed,  however,  the  term 
“all  hazards”  was  expanded  to  give  more  weight  to  the  potential  consequences  of  other  complex 
threats  (e.g.,  pandemics).  As  the  line  between  national  security  and  emergency  management 
(safety)  became  blurred,  conceptually  and  functionally,  it  made  sense  to  tackle  security  and  safety 
together.  Terrorism  became  one  of  many  threats.  For  example,  hostile  states,  terrorists,  criminals 
and  hackers  all  operate  in  cyberspace  in  ways  which  imperil  not  only  national  interests  but  also 
those  of  businesses  and  individuals.  Criminals  especially,  but  terrorists  too,  are  exploiting  the 
opportunities  provided  by  the  internet  to  increase  the  scope  and  impact  of  their  (hitherto  physical) 
activities.  Thus  “all  hazards”  now  includes  both  the  security  and  safety  aspects  of  human-induced 
threats  (intentional  and  accidental)  as  well  as  ‘natural’  and  environmental  threats  and  is  a  key 
element  of  the  more  comprehensive  and  integrated  risk  management  approach  to  national  security 
and  emergency  management  which  is  set  out  in  Securing  an  Open  Society:  Canada’s  National 
Security  Policy  April,  2004.21 

The  likelihood  that  preventing  an  attack  might  not  be  possible  in  the  face  of  growing  and 
emerging  threats  indicated  the  need  for  a  more  flexible  and  adaptable  strategy  for  limiting  the 
impact  of  disruptions  to  essential  services  as  well  as  deterring  potential  attackers.  An  integrated 
response  was  perceived  as  a  way  of  achieving  an  ‘acceptable’  level  of  protection  against  all 
threats  more  efficiently  and  effectively.22 


21  Privy  Council  Office,  “Securing  an  Open  Society:  Canada’s  National  Security  Policy,”  April  2004. 
http://www.pco-bcp.gc.ca/docs/information/publications/natsec-secnat/natsec-secnat-eng.pdf. 

22  See  Department  of  Homeland  Security  2010  Budget  Report  which  paraphrases  a  speech  by  President 
Obama’s  who  takes  the  same  position. 
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5  Energy  Specific  Threats 


The  criticality,  high  value  and  inherent  vulnerabilities  of  energy  infrastructure  make  it  a 
potentially  attractive  target  for  terrorists,  criminals,  anarchists  and  single  issue  extremists  groups. 
Not  all  groups  present  the  same  level  of  threat;  in  some  cases  disruption  rather  than  destruction 
may  be  the  objective;  a  demonstration  of  capabilities  might  suffice  for  some  groups,  whereas 
other  groups  may  perpetrate  violence  with  the  intention  of  altering  public  policy.  For  example,  a 
Canadian  pleaded  guilty  in  a  U.S.  court  in  March  2008,  for  plotting  an  attack  on  the  Trans-Alaska 
Pipeline  in  order  to  profit  from  the  expected  rise  in  oil  and  gas  futures.23  A  series  of  mysterious 
explosions  in  late  2008  to  early  2009,  targeted  natural  gas  pipelines  around  Dawson  Creek,  in 
northern  British  Columbia.  However,  these  ongoing,  low  level  threats  to  Canada’s  energy 
infrastructure  are  essentially  a  law  enforcement  and  public  order  problem. 

The  human-induced  threats  which  are  currently  deemed  potentially  the  most  injurious  to  critical 
energy  infrastructure  in  terms  of  potential  impact  are  terrorism,  cyber  crime  and  cyber  attacks. 
The  energy  sector  is  also  susceptible  to  infrastructure  failures  and  accidents — a  category  which 
includes  industrial  hazards  such  as  the  chemical  spills  that  regularly  occur  and  have  the  potential 
for  significantly  impacting  public  health  and  the  natural  environmental. 

In  its  latest  Public  Report,  the  Canadian  Security  and  Intelligence  Service  (CSIS)  placed 
particular  emphasis  on  the  threat  posed  by  Al-Qaeda  and  its  affiliates  to  Canada’s  energy  interests 
and  infrastructure:  “Al-Qaeda. ..has  warned  that  our  country  can  expect  attacks  similar  to  those 
experienced  in  New  York,  Madrid,  London...”  ...  “Additionally,  Al  Qaeda  has  identified 
Canada’s  oil  industry  as  a  target...”24  This  is  not  a  perception  shared  by  most  Canadians  who, 
according  to  a  recently  commissioned  survey,  considered  climate  change  to  be  a  bigger  threat  to 
Canada’s  vital  interests  over  the  next  ten  years  than  terrorism.25 

5.1  Terrorism 

International  terrorism,  specifically  violent  Islamist  terrorism,  is  a  low  probability/high  impact 
threat  to  Canada’s  energy  infrastructure.  The  risk  from  Al-Qaeda,  its  affiliates  or  the  home-grown 
terrorists  it  inspires,  derives  from  Canada’s  combat  role  in  Afghanistan,26  and  its  relationship  to 
the  U.S.  in  terms  of  geographic  proximity  and  as  a  major  energy  supplier.  Al-Qaeda  has  called  for 
“economic  jihad”  against  energy  installations  in  the  West  in  order  to  weaken  their  ability  “to 
resist  the  Islamist  onslaught.”27  As  both  a  target  in  its  own  right  and  as  a  means  of  striking  at 
American  oil  dependency,  which  Al-Qaeda  has  identified  as  America’s  greatest  strategic 


23  Deborah  Baker,  “Canadian  pleas  guilty  in  pipeline  plot,”  Associated  Press,  13  March  2008. 

24  Canadian  Security  and  Intelligence  Service,  Public  Report  2007-2008  (Ottawa:  Public  Works  and 
Government  Services,  Canada,  PS7 1-2008,  2009). 

25  Survey  commissioned  by  the  Canadian  Defence  and  Foreign  Affairs  Institute:  Canadian  perceptions 
about  threats  critical  to  Canada’s  interests  over  next  ten  years.  January  1010. 
http://www.cdfai.org/PDF/Poll%20on%20Threat%20Perceptions%20in%20Canada.pdf. 

26  Canadian  Security  and  Intelligence  Service,  Public  Report  2007-2008. 

27  Chris  Zambelis,  “Attacks  in  Yemen  Reflect  al-Qaeda’s  Global  Oil  Strategy,”  Terrorism  Monitor,  Vol.  6, 
No.  17,  4  September  2008. 
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vulnerability,  Canada  is  susceptible  to  a  major  attack.  Supply  disruptions  which  raise  oil  prices 
serve  Al-Qaeda’s  expressed  aim  of  “bleeding  America  to  the  point  of  bankruptcy.”28 

Canada  first  appeared  on  a  list  of  target  countries  in  2002.29  In  June  2004,  Al-Qaeda  in  the 
Arabian  Peninsula  (AQAP)  issued  “The  (Islamic)  Laws  of  Targeting  Petroleum-Related  Interests 
and  a  Review  of  the  Laws  Pertaining  to  the  Economic  Jihad.”30  Its  oil  and  natural  gas  facilities 
were  later  explicitly  identified  as  potential  targets  when  in  February  2006,  Al-Qaeda  called  for 
terror  attacks  on  North  American  oil  fields,  pipelines,  loading  platforms  and  carriers  as  a  means 
of  disrupting  services  to  the  United  States. 

Primary  targets  in  non-Muslim  jurisdictions  were  identified  as  being  oil  and  natural  gas  wells, 
pipelines,  refineries  and  oil  plants,  and  industry  personnel.  In  February  2007,  a  further  call 
encouraging  the  mujahideen  to  strike  oil  targets  “in  all  areas  which  supply  the  United  States”  in 
order  to  choke  the  U.S.  economy  was  made  by  AQAP  in  its  publication,  Sawt-al-Jihad.3>  The 
group  was  responsible  for  armed  attacks  on  oil  facilities  in  Yanbu  and  Khobar  in  Saudi  Arabia  in 
2004  and  for  the  assault  on  the  Abqaiq  oil  processing  complex  in  February  2006.  The  article  was 
addressed  not  only  to  militants  in  the  Arabian  Peninsular  but  to  jihadist  cells  in  other  energy 
producing  and  exporting  countries. 

Islamic  extremist  websites  have  identified  specific  energy  installations  as  potential  targets  for 
attack,  including  the  Trans-Alaska  oil  pipeline.  Many  miles  of  oil  pipelines  cross  North  America 
above  ground  and  are  impossible  to  protect  day  and  night  but  the  risk  is  mitigated  to  a  large 
extent  by  the  demonstrated  ability  of  companies  to  carry  out  rapid  repairs. 

While  the  risk  of  direct  physical  attacks  on  infrastructure  in  Canada  is  acknowledged,  the  threat  to 
personnel  receives  less  attention.  Furthermore  evidence  exists  of  a  growing  “insider”  threat  to 
sensitive  government  and  business  infrastructure  by  persons  whose  loyalty  is  ambiguous  and  who 
infiltrate,  or  who  are  suborned  after  recruitment,  to  serve  Al-Qaeda’s  interests.  The  many 
examples  which  have  been  uncovered  are  consistent  with  the  action  plan  proposed  by  al-Qaeda 
strategist  Abu  Bakr  Naji  and  articulated  as  follows: 

(We)  should  infiltrate  the  police  forces,  the  armies,  the  different  political  parties, 

the  newspapers,  the  Islamic  groups,  the  petroleum  companies  (as  an  employee  or 


28  “Full  Transcript  of  bin  Laden’s  Speech,”  Al  Jazeera.net ,  30  October  2004. 

29  “Securing  an  Open  Society:  Canada’s  National  Security  Policy,”  April  2004,  p.  6. 

30 

Al-Qaida  in  Saudi  Arabia:  Excerpts  from  “The  Laws  of  Targeting  Petroleum-Related  Interests,”  written 
by  Shaykh  Abdullah  bin  Nasser  al-Rashid  (aka  Abdelaziz  bin  Rashid  al-Anzi),  Global  Terror  Alert,  March 
2006.  See  also:  Jack  Williams,  “Al-Qaida  Threats  and  Strategies:  The  Religious  Justification  for  Targeting 
the  International  Energy  Economy,”  CEIPPR  Research  Series  No. 3  -  2008. 

31  Adeeb  al-Bassam,  “Bin  Laden  and  the  Oil  Weapon,”  Sawt  al-Jihad  (Voice  of  Jihad)  Muharram  1428  AH 
February  2007,  translated  by  the  SITE  Institute,  Washington,  D.C.  See  also,  Stewart  Bell,  “Al-Qaeda 
affiliated  website  calls  for  attacks  on  Canadian  Oil  Industry,”  National  Post ,  9  February  2007;  and  Ian 
MacLeod,  “Al-Qaeda  Calls  for  Attacks  on  Canadian  Oil  Facilities,”  National  Post ,  14  February  2007. 
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as  an  engineer),  private  security  companies,  sensitive  civil  institutions.  (Abu 
Bakr  Naji) 32 

Examples  are  legion:  former  US  Navy  sailor  Hassan  Abu-Jihaad  was  convicted  of  giving 
intelligence  about  naval  movements — including  of  a  Canadian  warship — to  potential  jihadist 
enemies;  the  UK  domestic  intelligence  service,  MI5  unmasked  Al-Qaeda  sympathisers  who 
attempted  to  join  its  ranks  following  a  recruitment  drive  aimed  at  young  British  Muslims;  and  in 
Canada,  recently-convicted  Canadian-born  terrorist  Momin  Khawaja  worked  as  a  software 
consultant  at  the  Department  of  Foreign  Affairs,  Ottawa.33 

Given  that  Al-Qaeda  persists  in  its  efforts  to  acquire  weapons  and  materials  of  mass 
destruction — chemical,  biological,  radiological,  or  nuclear  (CBRN) — the  insider  threat  is  of 
particular  concern  because  of  the  possibility  that  these  materials  might  fall  into  the  hands  of  rogue 
states  or  terrorist  groups.34  While  a  physical  attack  on  nuclear  facilities  is  a  risk  despite  protective 
measures,  the  theft  of  fissile  and  toxic  materials  from  a  nuclear  site,  chemical  or  biological 
facility  is  a  greater  one.35  A  UK  Government  report  has  noted  that  expertise  acquired  by 
insurgents  in  Afghanistan  has  increased  the  threat  from  a  radiological  “dirty  bomb.”36 

These  risks  are  mitigated  to  some  extent  by  the  stringent  regulatory  controls  applied  to  nuclear 
facilities.  Unlike  other  energy  sub-sectors,  nuclear  power  and  uranium  production  exceptionally 
comes  within  federal  jurisdiction  because  of  its  special  characteristics  and  international  treaty 
obligations  even  where  provincial  governments  own  the  reactors.37  The  Canadian  Nuclear  Safety 
Commission  (CNSC)  derives  authority  to  regulate  security  matters  under  the  Nuclear  Safety  and 
Control  Act  (2000). 

However,  infiltration  could  result  in  a  facility  shut  down  if  an  “insider”  has  sufficient  skills  to 
sabotage  control  systems  or  if  restricted  access  codes  are  compromised.  Last  year  a  former 
Arizona  Palo  Verde  nuclear  generating  station  engineer,  Mohammad  Reza  Alavi,  was  convicted 
of  taking  restricted  access  codes  to  Iran,  his  country  of  origin.38  The  recent  arrest  in  Yemen  of 
Sharif  Mobley,  formerly  a  labourer  at  nuclear  plants  in  New  Jersey,  caused  alarm  because  of  his 


32  Abu  Bakr  Naji,  “The  Management  of  Savagery,”  Trans.  William  McCants  (Cambridge,  Mass.:  John  M. 
Olin  Institute  for  Strategic  Studies,  Harvard  University,  23  May  2006). 
http://ctc.usma.edu/publications/pdf/Management  of  Savagery.pdf. 

33  For  other  examples  see  Marc  Lebuis,  “Islamism  and  the  Infiltration  Challenge,”  Civitas  Annual 
Conference,  20  August,  2009,  accessed  at  www.pointdebasculecanada.ca/article/1 178-islamism-and-the- 
infiltration-challenge-by-marc-lebuisnbsp-2009-civitas-annual-conference.php. 

34  CSIS  Public  Report  2007-2008,  p4. 

35  The  International  Atomic  Energy  Authority  recorded  1,562  incidents  where  nuclear  material  was  lost  or 
stolen  between  1993  and  2008,  mostly  in  the  former  Soviet  Union,  and  65  percent  of  the  losses  were  never 
recovered. 

Annual  Update  Report,  2010  to  Contest  II,  the  UK’s  Counterterrorism  Strategy. 
http://www.statewatch.org/news/20 1 0/apr/uk-nss-contest-annual -report-20 1 0.pdf. 

37  John  B.  Hay,  “Who  Does  What?  Critical  Energy  Infrastructure  Protection  in  the  Canadian  Government,” 
Critical  Energy  Infrastructure  Protection  Policy  Research  Series  (Ottawa:  Carleton  University,  Canadian 
Centre  for  Intelligence  and  Security  Studies,  2006). 

38  “American  Spy  for  Iran  Receives  15-month  Sentence,”  Associated  Press ,  17  December  2008. 
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links  to  the  radical  extremist  preacher,  Anwar  al-Awlaki39  whose  influence  has  contributed  to  acts 
of  militant  jihadism  in  the  United  States. 

Lethal  technologies,  often  dual-use,  circulate  easily  in  our  globalized  economy,  as  do  the 
personnel  with  scientific  expertise  who  design  and  use  them.  To  reduce  the  associated  risks,  the 
government  of  the  UK  introduced  the  “Academic  Technology  Approval  Scheme”  (ATAS)  in 
November  2007  which  requires  postgraduate  students  from  non-European  Union  countries  to  be 
vetted  by  government  officials.  The  scheme  seeks  to  prevent  the  acquisition  of  knowledge  or 
skills  from  British  universities  being  used  to  build  weapons  of  mass  destruction  (WMDs). 

5.2  Environmental 

Extreme  weather  events  put  a  strain  on  power  delivery  systems.  Generally  speaking,  the 
consequences  of  environmental  threats  are  a  matter  of  incident  response,  emergency  management 
and  adapting  to  environmental  circumstances.  Many  regions  of  Canada  have  been  subject  to 
severe  “natural  disasters”  which  have  taken  lives  and  caused  extensive  property  damage.  Natural 
disasters  encompass  a  variety  of  meteorological  and  geological  hazards  of  which  floods  are  the 
most  frequent  and  the  leading  cause  of  property  damage  and  death.  Hurricanes,  earthquakes  and 
wildfires  are  also  part  of  the  natural  hazard  landscape  and  can  result  in  the  discontinuity  of  power 
supplies  which  in  turn  are  likely  to  affect  recovery  efforts. 

The  issue  is  whether  events  such  as  the  ice-storm  which  affected  South-Eastern  Canada  in  1998 
and  cut  off  power  supplies  to  millions  are  extremely  low  probability  events,  or  whether  there  is 
sufficient  actuarial  evidence  to  indicate  that  investment  in  more  robust  infrastructure  is  needed  to 
avoid  the  risk  of  a  re-occurrence.  Those  who  are  convinced  that  climate  change  (perceived  as 
being  human-induced  or  exacerbated)  is  a  significant  contributor  to  the  frequency  or  severity  of 
traditional  environmental  threats,  argue  for  more  proactive  measures  to  ensure  the  future 
resilience  of  society  and  its  infrastructure.40  They  attribute  inaction  and  the  lack  of  concern 
about  associated  security  risks  to  Canadian  complacency,  scepticism  or  confusion.41 

Be  that  as  it  may,  the  immediate  priority  for  policy  makers  is  to  rectify  inadequacies  in  current 
provisions  for  protecting  critical  energy  infrastructure  and  services  against  known  risks — a 
calculus  which  must  now  also  take  into  account  the  likelihood  of  attacks  on  the  resource-based 
energy  sector  by  radical  activists  who  believe  that  environmental  degradation  will  ultimately  be 
detrimental  to  economic  prosperity  and  human  survival  in  the  long-term. 


39  Peter  Finn,  “The  Post-9/1 1  Life  of  an  American  Charged  with  Murder,”  Washington  Post ,  5  September 
2010.  Mr.  Mobley  had  been  in  contact  with  Anwar  al-Awlaki,  the  Yemeni-American  cleric  whose  radical 
sermons  have  been  found  on  the  computers  of  more  than  a  dozen  terror  suspects  in  the  West  and  had 
recently  been  linked  to  the  Nigerian  man  accused  of  attempting  to  bomb  a  jetliner  bound  for  Detroit  on 
Christmas  Day,  and  Major  Nidal  Hasan,  the  army  psychiatrist  accused  of  killing  13  people  at  Fort  Hood 
Texas  in  November,  2009. 

40  Cleo  Pascall,  “The  Vulnerability  of  Energy  Infrastructure  to  Environmental  Change,”  Chatham  House 
Energy,  Environment  and  Resource  Governance,  April  2009,  EERG  BP  2009/01.  The  study  calls  for  the 
design,  location  and  retrofitting  of  infrastructure  for  changing  environment  conditions. 

41  Margaret  Purdy  and  Leane  Smythe,  “From  Obscurity  to  Action,”  International  Journal,  Vol.  65,  Issue  2, 
Spring  2010  p.414. 
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Opposition  to  environmentally  destructive  and  water-polluting  Canadian  oil-sands  production 
could  threaten  the  reliability  of  Canada’s  future  energy  exports  to  the  United  States.  To  date,  U.S. 
policy  has  supported  oil-sands  production  but  this  may  not  continue  to  be  the  case  indefinitely  if 
at  some  point  that  policy  comes  into  conflict  with  a  U.S.  water  and  food  security  policy  which 
prioritizes  access  to  uncontaminated  water  supplies. 

5.3  Cyber  Attacks 

Cyber  security  is  at  the  forefront  of  the  trans-border  challenge  to  Canada’s  critical  infrastructure. 
Since  cyberspace  knows  no  borders,  defensive  efforts  must  be  similarly  seamless.  Protecting  the 
cyber  links  and  IT  services  which  connect  and  control  critical  infrastructure  is  much  more 
complex  than  protecting  physical  assets  because  of  the  fragmented  nature  of  the  ownership  and 
regulatory  control  of  the  global  cyber  domain. 

Sophisticated  state-led  cyber  espionage  or  warfare  is  a  serious  issue  but  easier  to  deter  when  the 
adversary  is  a  state  with  an  easily  identifiable  government  and  location  than  when  cyber  attacks 
are  carried  out  by  surrogates,  criminals,  terrorists  and  hackers  who  cannot  readily  be  traced. 
These  attackers  also  exploit  cyber  space  for  their  own  ends  and  their  activities  pose  a  real  threat 
not  just  to  state  interests  but  to  ordinary  individuals  and  businesses  across  Canada.  Confidence  in 
government  can  be  undermined  if  cyber  attacks  target  and  shut  down  government  websites 
causing  a  denial  of  service. 

While  the  assessment  of  some  analysts  is  that  terrorists  operating  under  the  umbrella  of  Al-Qaeda 
are  more  likely  to  opt  for  a  high  profile  physical  attack  which  inflicts  mass  casualties  or  the 
destruction  of  infrastructure,  cyber  attacks  which  cause  prolonged  disruptions  rather  than  physical 
casualties  can  wreak  massive  economic  damage  of  the  sort  which  Al-Qaeda  has  called  for  in 
terms  of  its  “economic  jihad.”  Nevertheless,  choke  points  in  the  data  and  communications  part  of 
the  NCI  could  be  a  tempting  target  for  a  physical  attack.42 

FBI  Director  Robert  Mueller  has  referred  to  “numerous  denial-of-service  attacks”  by  Al-Qaeda 
terrorists  and  other  extremists  and  suggests  they  have  an  “eye  toward  combining  physical  attacks 
with  cyber  attacks.”43  According  to  The  Centre  for  the  Protection  of  National  Infrastructure, 
(CPNI),  a  UK  Government  Agency,  “large  scale”  electronic  attacks  by  foreign  intelligence 
services  have  successfully  compromised  the  security  of  many  large  British  companies  in 
operations  aimed  at  stealing  government,  defence  and  technology  information.44  Islamist  terrorists 
were  also  said  to  be  behind  internet  attacks  which,  although  limited  in  scope,  were  on  the 
increase. 

Power  supply  chains  can  be  subverted  by  the  implantation  of  malicious  programs  into  software. 
Recent  attempts  to  hack  into  the  shared  U.S. -Canada  electrical  grid  comprising  high-voltage 
transmission  lines  which  span  340,000  kilometres  and  serve  334  million  people,  did  not  damage 


42  A  view  supported  by  MI5,  the  UK’s  Security  Service.  The  data  underpinning  London’s  role  as  an 
international  financial  centre  is  stored  in  the  Dockland  area  and  would  provide  such  a  target. 

43  The  Federal  Bureau  of  Investigation,  “The  Cyber  Threat’  Headline  Archives,”  4  March  2010. 
http://www.fbi.gov/page2/marl0/cvberintel030410.html 

44  “Foreign  Intelligence  Services  Hack  into  British  Companies,”  Daily  Telegraph  (London),  12  March 
2010. 
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the  power  grid  or  other  key  infrastructures  but  intruders  left  behind  software  which,  according  to 
U.S.  officials,  could  be  used  to  disrupt  the  system  at  some  future  date — for  warfare  puiposes  or 
commercial  advantage.45  Similar  intrusions  have  been  detected,  not  by  the  companies  in  charge  of 
the  infrastructure,  but  by  U.S.  intelligence  agencies  concerned  about  cyber  attackers  taking 
control  of  electrical  facilities,  a  nuclear  power  plant  or  financial  networks  via  the  Internet.46 

There  are  no  known  similar  “embedded”  threats  to  the  Canadian  portion  of  the  international 
power  network,  but  growing  reliance  on  Internet-based  communications  has  increased  the 
vulnerability  of  control  systems  to  the  activities  of  criminals,  spies  and  hackers.  Almost  all 
critical  industrial  infrastructures  and  processes  are  today  managed  remotely  from  central  control 
rooms  using  computers  and  communications  networks.  Understanding  and  mitigating  the  risks  of 
electronic  attack  to  SCADA  systems  is  a  key  issue  for  infrastructure  protection. 

The  worst-case  scenario  is  that  a  cyber  attack  could  override  controls  at  a  chemical  or  nuclear 
plant  and  cause  a  chemical  release  or  nuclear  meltdown.  However,  where  there  is  such  a  risk, 
control  systems  are  generally  disconnected  from  networks  that  connect  to  the  Internet.  While  an 
“insider”47  who  understood  the  control  software  for  an  electric  grid  could  pose  a  threat,  such  skills 
are  not  widely  available  and  the  vulnerability  can  be  reduced  by  adherence  to  good  personnel 
practices  and  access  control  procedures. 

Protecting  the  electrical  grid  and  other  infrastructure  is  a  key  part  of  the  Obama  administration's 
cyber  security  strategy  and  it  was  mentioned  in  Canada’s  National  Security  Policy  (2004).48 
Despite  a  statement  by  (then)  Public  Safety  Minister  Peter  Van  Loan  regarding  the  need  for  the 
Canadian  government  to  create  “an  overall  cyber-security  strategy”  which  encompasses  both  the 
public  and  private  sectors,  it  has  not  yet  been  published.  Former  Canadian  ambassador  to 
Washington,  Derek  Burney,  believes  that  the  Canada-U.S.  power  grid  is  probably  a  primary  cyber 
target  and  urges  a  more  robust  defence  for  computer  systems.49 

Reducing  the  vulnerabilities  of  cyber  networks  is  complicated  by  the  fact  that  while  more  than  90 
percent  of  the  physical  infrastructure  of  the  Web  is  owned  by  private  industry,  key  elements  of 
cyber  security  expertise  lie  within  federal  government.  On  its  own,  neither  side  can  ensure  the 
continuity  and  integrity  of  the  infrastructure. 


45  Siobhan  Gorman,  “Electricity  Grid  in  the  US  Penetrated  by  Spies,”  Wall  Street  Journal ,  April  2009.  The 
attacks  are  believed  to  have  been  perpetrated  by  China  or  Russia  but  attribution  has  not  been  confirmed. 

46  Ibid. 

47  For  example,  a  disgruntled  employee  or  someone  who  becomes  disaffected  for  religious  or  ideological 
reasons. 

48  “Securing  an  Open  Society:  Canada’s  National  Security  Policy,”  p.  26. 

49  “CEIP:  Canada  and  US  legislation  to  protect  its  power  grid  against  cyber-attack,”  Ottawa  Citizen,  22 
November  2009. 
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6  Managing  the  Risks  to  Canada’s  National  Critical 
Infrastructure 


Identifying  specific  physical  assets  of  national  importance  and  developing  plans  to  protect  them  is 
the  traditional,  defensive  response  to  site  specific  threats.  Protective  security  measures  aim  to 
reduce  physical,  personal,  technical  and  communications  vulnerabilities  by  providing  mutually 
reinforcing  security  layers  for  national  infrastructure.  They  include  security  by  design  and  other 
site  hardening  measures  which  seek  to  strengthen  the  robustness  and  resilience  of  buildings, 
installations  and  equipment  against  attacks  or  natural  events,  e.g.,  building  redundancy  capacity  is 
a  way  of  accommodating  equipment  failure  or  destruction,  and  ensuring  business  continuity. 
Physical  and  cyber  access  controls,  security  clearances  and  personnel  practices  aim  to  prevent 
unauthorized  visitors,  system  users  and  identify  disaffected  staff. 

This  “guards  and  gates”  approach  to  national  security  is  still  the  first  line  of  defence  for  key 
installations  but  it  is  now  considered  to  be  just  one  of  the  strategies  available  for  reducing 
vulnerabilities  and  contributing  to  the  assurance  of  critical  infrastructure  within  a  comprehensive 
risk  management  effort  to  assure  national  critical  infrastructure  against  all  threats  and  across  all 
sectors.  The  focus  of  Canada’s  integrated  approach  to  national  security  now  with  respect  to 
securing  critical  infrastructure  is  on  improving  resilience  (preparedness  and  recovery),  supply 
assurance  (continuity  of  essential  services),  and  mitigation  measures  (minimizing  the  impact). 
National  security  risks  are  treated  as  just  one  part  of  an  integrated  ‘all-hazards’  risk  management 
system. 

Reducing  vulnerabilities  to  natural  disasters  traditionally  focuses  on  incident  response  and 
consequence  management.  The  primary  responsibility  for  the  protection  of  critical  infrastructure 
at  the  local  level  rests  with  the  owners  and  operators  who  are  responsible  for  day-to-day 
protective  measures  and  ongoing  risk  assessments.  Identifying  and  managing  the  risks  to  their 
critical  infrastructure  assets,  services  and  systems  allows  scarce  resources  to  be  allocated  where 
they  are  most  needed  to  prevent,  mitigate  and  recover  from  security  and  emergency  management 
events. 

The  expertise,  local  knowledge  and  motivation  to  protect  their  own  assets,  investments  and 
reputation  makes  owner/operators  better  suited  to  the  task  than  any  government  authority  and 
they  may  also  have  access  to  resources  and  expertise  not  always  available  to  the  public  sector. 
Developing  the  necessary  “situational  awareness,”  or  understanding  of  the  risks,  will  be  foremost 
a  site  or  service  specific  exercise,  but  a  comprehensive  approach  includes  examining  risks  to  the 
sector  as  a  whole  and  the  critical  infrastructure  community  more  broadly.  This  is  done  in 
consultation  with  and  assistance  from  federal,  provincial  and  territorial  authorities  (FPT). 

The  aim  of  evaluating  and  assessing  the  risks  from  a  comprehensive  “all-hazards”  approach  is  to 
ensure  adequate  levels  of  protective  security  for  all  critical  infrastructure,  (depending  upon  the 
impact  caused  by  the  failure  of  particular  assets  and  services),  minimal  points  of  failure  and  rapid, 
tested  recovery  arrangements.  The  assumption  that  the  synergies  derived  from  a  common 
approach  to  all  threats  will  provide  the  necessary  level  of  protection  for  each  is  questionable,  but 
attractive  given  the  reality  of  finite  security  budgets  and  an  acceptance  that  preventing  attacks 
may  not  always  be  possible  when  confronted  with  numerous  and  sometimes  unknown  threats. 


18 


DRDC  CORA  CR  2010-274 


Reliance  on  an  integrated  approach  for  delivering  protection  against  all-hazards,  including 
terrorism,  is  premised  on  the  assumption  that  vulnerabilities  across  the  spectrum  of  risks  can  be 
reduced  to  an  “acceptable”  level  by  enhancing  resilience  to  improve  recovery  capabilities  and 
mitigation  measures  to  reduce  impacts.  As  the  2008  Emergency  Management  Framework  for 
Canada  states,  “assessing  the  risks  associated  with  all  hazards  in  an  integrated  way,  may  be 
broadly  effective  in  reducing  the  vulnerability  of  people,  property,  the  environment  and  the 
economy.”50 

In  an  integrated  “all-hazards”  risk  management  system,  emergency  management  decisions, 
particularly  those  concerning  resource  allocation,  are  invariably  risk-based,  or  risk  informed  by 
the  construct  that  risk  is  the  product  of  threat,  vulnerability  and  consequence  (R  =  T  x  V  x  C). 
While  logically  intuitive  and  consistent  with  conceptualizations  of  risk  in  other  domains,  this 
approach  is  less  applicable  to  low  probability/high  impact  national  security  threats  where 
invariably  no  actuarial  data  is  available  for  calculating  the  risks,  i.e.,  terrorism.  Owners  and 
operators  are  unlikely  to  invest  in  specific  prevention  and  protection  measures  against  such  risks 
and  therefore  an  “undersupply  of  security”  is  likely  without  some  regulatory  provincial  or  federal 
intervention.  Some  risks  are  so  catastrophic  that  “disproportional”  countermeasures  might  be 
warranted,  i.e.,  to  prevent  terrorists  using  CBRN  materials. 

Risk-based  decisions  which  assess  the  likelihood  and  potential  impact  of  a  range  of  different  risks 
to  specific  assets  are  helpful  to  owners  of  specific  assets  because  they  are  familiar  with  their 
normal  operating  conditions  (their  baseline)  and  can  apply  their  risk  assessment  to  it.  But  given 
the  range  of  viable,  credible  threats  against  any  of  the  currently  defined  Cl  sectors,  assessing  risks 
in  the  context  of  an  “all-hazards”  approach  is  less  meaningful  because  understanding  the 
interdependencies  within  and  between  sectors  and  managing  cascading  risks  requires  a  common 
measurement  for  mapping  Cl  interdependency.  Lacking  this,  the  allocation  of  resources  for  Cl 
protection  will  be  determined  by  data  which  is  incomplete  and  inadequate  for  assessing  the 
impact  of  current  vulnerabilities  and  emerging  threats. 

The  specific  data  necessary  for  managing  the  risks  by  assessing  the  impact  of  current 
vulnerabilities  or  emerging  threats  is  not  always  available. 


50  Public  Safety  and  Emergency  Preparedness  Canada,  ‘An  Emergency  Management  Framework  for 
Canada’  2008.  http://www.publicsafety.gc.ca/prg/em/emfrmwrk-eng.aspx,  accessed  on  30  March  2010. 
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7  Government  Response  to  Emerging  Threats 


In  March,  2001,  ministers  responsible  for  energy  matters  from  Canada,  Mexico,  and  the  United 
States  met  to  discuss  a  common  hemispheric  energy  strategy  for  the  three  North  American  Free 
Trade  Agreement  (NAFTA)  countries.  The  outcome  of  these  trilateral  discussions  was  the 
drafting  of  an  energy  annex  to  the  North  American  Security  and  Prosperity  Partnership  (SPP) 
agreement  which  committed  signatories  to  the  protection  of  the  critical  energy  infrastructure 
deemed  vital  for  North  American  economic  well-being. 

7.1  Post  9/11  Perceptions,  Reorganization,  Legislation 

Terrorist  attacks  against  the  U.S.  on  September  11th  2001  increased  the  focus  on  the  threats  from 
international  terrorism  and  brought  about  a  shift  from  a  culture  of  emergency  management  and 
safety  to  one  of  security.  The  attacks  were  the  catalyst  for  change  and  reorganization  within 
Canadian  federal  government  departments  and  agencies  but  anti-terrorism  legislation,  (aimed 
primarily  at  facilitating  the  detection,  detention  and  prosecution  of  terrorists),  was  introduced  as 
much  to  reassure  U.S.  authorities  that  its  interests  were  being  satisfactorily  protected  in  Canada 
than  because  there  was  any  real  conviction  that  Canada  itself  was  a  target.  Nevertheless,  any 
perceptions  that  Canada  was  a  potential  launching  pad  for  attacks  against  the  U.S.  had  to  be 
dispelled51  if  the  free  flow  of  goods  and  people  across  the  shared  border,  vital  to  Canada’s 
economic  prosperity,  was  to  be  preserved. 

A  National  Security  Advisor  to  the  Prime  Minister  was  appointed  and  new  cabinet  committees 
created,  including  one  for  security,  public  health  and  emergencies,  to  oversee  among  other  files 
infrastructure  protection.  A  Government  Operations  Centre  was  established  in  2004  to  serve 
decision-makers  as  a  central  collection  and  communications  repository  of  information  from 
federal  departments,  agencies,  provinces,  territories  and  other  countries,  including  the  United 
States. 

Reorganization  brought  together  security  and  law  enforcement  organizations  under  the  newly 
created  department  of  Public  Safety  and  Emergency  Preparedness  Canada  (PSEPC) — the 
Canadian  analogue  to  the  Department  of  Homeland  Security  in  the  U.S.  Critical  energy 
infrastructure  assurance  was  to  be  achieved  through  protective  measures  focused  on  key  facilities 
and  enhanced  emergency  preparedness  and  mitigation  management. 


51  Ahmed  Ressam’s  attempt  to  blow  up  Los  Angeles  Airport  was  foiled  by  a  border  guard  when  he  crossed 
into  the  U.S.  from  Canada  on  14  December  1999. 
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7.2  Smart  Border  for  the  21st  Century  Declaration,  December 
2001 

To  improve  security  on  their  shared  border,  Canada  and  the  U.S.  signed  the  Smart  Border  for  the 
21s'  Century  Declaration  on  December  12,  200152  which  aimed  to  find  a  workable  balance 
between  security  and  the  free  flows  of  trade  and  people  across  the  border.  Included  in  its  Action 
Plan  was  an  undertaking  to  “conduct  bi-national  assessments  on  trans-border  infrastructure  and 
identify  additional  protection  measures...”  that  might  be  necessary.  Comprehensive  threat  and 
vulnerability  assessments  on  shared  cross-border  critical  infrastructure  (especially  energy)  were 
to  be  based  on  “a  spectrum  of  potential  threats.” 

7.3  Public  Safety  Act,  2002 

The  Public  Safety  Act  (2002)  and  a  number  of  legislative  amendments53  were  enacted  to  provide 
Regulators  with  a  clear  statutory  basis  for  regulating  the  security  as  well  as  the  safety  aspects  of 
interprovincial  and  international  energy  assets54  a  change  necessitated  by  a  growing  realisation 
that  oil,  gas  and  nuclear/electrical  power  facilities  were  attractive,  high  value/high  impact  targets 
for  terrorists. 

7.4  The  Integrated  Threat  Assessment  Centre  (ITAC) 

The  Integrated  Threat  Assessment  Centre  (ITAC)  was  created  in  2004  as  an  interdepartmental 
agency  for  assessing  predominantly  terrorist  threats.  It  was  established  after  difficult  and 
protracted  negotiations  between  participant  departments  protective  of  their  own  analytic 
authority.  ITAC  prepares  and  distributes  its  assessments  to  other  parts  of  government  and  law 
enforcement.  In  effect,  these  are  the  same  organizations  which  supply  ITAC  with  the  raw 
intelligence  upon  which  its  assessments  are  based. 

7.5  Natural  Resources  Canada 

Natural  Resources  Canada  (NRCan)  was  assigned  federal  responsibility  for  policies  relating  to 
critical  energy  infrastructure  protection  (CEIP),  including  terrorism,  in  2002.  Constitutionally 
natural  resources  fall  mostly  under  provincial  jurisdiction,  however,  that  authority  is  limited  to 
“in  Province”  activities  only.  Federal  authority  therefore  covers  energy  infrastructure  and  related 


52  The  Smart  Border  for  the  2P'  Century  Declaration  which  the  US  and  Canada  signed  on  12  December 
2001  was  to  be  implemented  through  a  30-point  action  plan  which  aimed  to  secure  infrastructure,  secure 
the  flow  of  goods  and  people  across  the  border,  and  enhance  information  sharing  and  cooperation. 

53  The  new  law  amended  the  Criminal  Code,  the  Official  Secrets  Act  and  other  legislation  in  order  that 
terrorist  threats  could  more  effectively  be  identified,  investigated  and  prosecuted.  It  also  provided  for  the 
ratification  of  the  Suppression  of  the  Terrorist  Financing  Convention  and  the  Suppression  of  Terrorist 
Bombings  Convention  (which  contains  specific  provisions  against  attacks  on  infrastructure.)  The  Public 
Safety  Act,  2002  amended  the  National  Energy  Board  Act  by  extending  the  powers  and  duties  of  the 
National  Energy  Board  to  include  matters  relating  to  the  security  of  pipelines  and  international  power  lines. 

54  For  example,  oil  and  gas  pipelines,  offshore  oil  and  gas  facilities,  international  power  lines  and  nuclear 
facilities. 
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matters  of  national  security  which  cross  inter-provincial  boundaries  and  international  borders. 
From  a  policy  perspective,  a  systems  approach  is  adopted  by  the  federal  authority  which  tracks 
the  point  of  production/generation  (of  oil,  natural  gas  and  electricity)  to  the  point  of 
distribution/consumption.  The  Minister’s  powers,  and  those  of  the  Regulatory  “Portfolio 
Agencies”  derive  from  a  number  of  sources,  as  detailed  in  section  1 1  below. 

Soon  after  the  events  of  11  September  2001,  NRCan  established  the  Energy  Infrastructure 
Protection  Division  (EIPD)  to  implement  its  mandate.  EIPD  provided  a  central  point  of  contact 
for  energy  sector  owners  and  operators  across  Canada  and  established  a  reputation  nationally  for 
being  pro-active  in  developing  initiatives  in  pursuit  of  it  six  main  tasks  which  included  collecting, 
analyzing  and  sharing  information  among  energy  sector  stakeholders. 

As  the  lead  interlocutor  with  the  U.S.  Department  of  Energy,  EIPD  was  involved  with  bi-national 
assessments  of  shared  critical  energy  infrastructure  and  represented  NRCan  on  North  American 
Working  Groups.  It  was  required  to  liaise  with  federal  and  provincial  governments,  regulatory 
agencies,  the  energy  industry  and  its  associations  and  to  promote  initiatives  to  strengthen 
Canada’s  critical  energy  infrastructure. 

As  John  Hay  commented,  “taken  together,  these  initiatives  marked  a  dramatic  redirection  of 
government  energies  towards  security  and  intelligence  priorities — and  towards  a  more  coherent 
management  of  Canada-US  relations.”55  Although  some  progress  was  made  and  PSEPC 
established  a  cross-Canada  program  for  providing  appropriate  assurance  for  national  critical 
infrastructure  assurance  in  2002,  initiatives  regarding  the  protection  of  critical  infrastructure 
stalled  thereafter. 

7.6  National  Critical  Infrastructure  Assurance 
Program— Discussion  Paper  2002 

The  National  Critical  Infrastructure  Assurance  Program  (NCIAP)  made  it  clear  that  the  traditional 
site  specific,  physical  approach  to  protecting  the  national  infrastructure  was  to  be  superseded  by  a 
more  integrated  approach  which  recognized  “a  need  to  focus  instead  on  the  overall  systems  and 
networks  that  make  up  the  National  Critical  Infrastructure  and,  more  importantly,  on  the 
associated  interdependencies.”56  The  puipose  of  the  NCIAP  was  “to  provide  a  national 
framework  for  cooperative  action  and  to  build  a  resilient  national  critical  infrastructure.”57  This 
was  to  be  done  through  collaborative  public/private  sector  partnerships.  Work  was  begun  on 
developing  a  strategy  in  which  would  include  “voluntary  participation  from  industry  stakeholders 
as  well  as  federal,  provincial  and  territorial  governments.” 

The  assurance  program  introduced  the  concept  of  “all-hazards”  and  it  provided  a  formal 
definition  of  “national  critical  infrastructure”  (NCI);  furthermore,  it  identified  six  NCI  sectors 
(these  were  later  increased  to  ten).  Defining  them  presented  a  challenge  due  to  the  increasing 


55  John  B.  Hay,  “Who  Does  What?  Critical  Energy  Infrastructure  Protection  in  the  Canadian  Government,” 

p.  12. 

56  Public  Safety  and  Emergency  Preparedness  Canada,  “The  Creation  of  the  NCIAP,”  2002. 

57  Public  Safety  and  Emergency  Preparedness  Canada,  (PSEPC)  National  Critical  Infrastructure  Assurance 
Program,  (Ottawa:  PSEPC,  2002). 
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dependence  on  information  systems  and  networks  of  all  Cl,  the  possibility  of  cascading  effects 
resulting  from  interdependencies,  Government  ownership  and  operation  of  only  a  small  share  of 
the  NCI  and  the  challenges  of  ‘borderless’  cyberspace. 

Previous  consultations  with  owners  and  operators  regarding  the  production  of  a  master  list  of 
National  Critical  Infrastructure  (NCI)  had  raised  concerns  regarding  the  ownership  and  protection 
of  the  list  and  associated  information.  As  a  consequence  the  focus  henceforth  was  to  be  on 
coordinating  the  efforts  of  all  stakeholders  to  provide  assurance  that  their  combined  efforts  would 
result  in  a  resilient  and  viable  NCI.  Two  general  elections  and  a  change  of  Liberal  leadership 
were  to  take  place  before  a  “Position  Paper”  on  critical  infrastructure  would  be  released  in  2005. 
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8  An  Integrated  Approach  to  Emerging  Threats 


As  the  trauma  of  9/1 1  receded,  security  authorities  gained  more  experience  and  developed  a  better 
understanding  of  the  global  dimensions  of  newly  emerging  threats  and  vulnerabilities.  In  2004, 
the  most  extensive  formal  statement  on  national  security  ever  made  by  a  Canadian  government 
was  published  which  stated  that  while  Canada  had  a  system  in  place  with  respect  to  terrorism, 
whereby  government  shared  threat  information  with  first  responders,  law  enforcement  officials, 
critical  infrastructure  providers  and  provincial  and  territorial  governments,  it  intended  to  “expand 
its  capacity  to  ensure  full  connectivity  on  a  wider  range  of  threats  to  create  a  truly  national  system 
of  protection  and  prevention.”58 

Terrorism  was  henceforth  to  be  treated  as  one  of  many  threats,  and  national  security  incidents 
were  to  be  viewed  as  one  part  of  a  modern  integrated  strategy  for  emergency  management  of  all¬ 
hazards  in  which  the  federal  government  would  play  an  enhanced  role.  Federal  entities  would  be 
required  to  work  together  in  a  more  coordinated  way  and  to  develop  closer  links  with  emergency 
operations  at  the  provincial,  territorial  and  local  levels.  The  statutory  framework  for  the 
Government’s  emergency  management  activities,  in  particular,  the  Emergency  Preparedness  Act 
(1985),  was  to  be  reviewed  and  updated  (The  Act  was  later  repealed  upon  assent  of  the 
Emergency  Management  Act  (2007)).  The  Government  acknowledged  that  existing  national 
emergency  coordination  suffered  from  the  absence  of  both  an  effective  federal-provincial- 
territorial  governance  regime,  and  from  the  absence  of  commonly  agreed  standards  and  priorities. 
Federal  entities  were  henceforth  required  to  work  together  in  a  more  coordinated  way  and  to 
develop  closer  links  with  emergency  operations  at  the  provincial,  territorial  and  local  levels. 

Critical  infrastructure  protection  was  identified  in  the  document  as  one  of  the  main  challenges. 
Reference  was  made  to  work  that  had  begun  “to  drive  forward  a  national  process  that  prioritizes 
substantial  improvement  of  our  national  capabilities  in  critical  infrastructure  protection.”59  A 
“Position”  paper  was  eventually  released  in  200560  which  contained  proposals  for  a  National 
Strategy  for  Critical  Infrastructure  which  would  establish  a  basis  for  federal,  provincial  and 
territorial  governments  and  the  private  sector  to  meet  that  challenge  (see  Summary  at  Annex  B  ). 
Protection  of  assets  was  just  one  of  the  strategies  available  to  better  secure  critical  infrastructure. 

Public  Safety  Canada  (the  successor  to  PSEPC)  was  described  as  the  lead  department  in 
protecting  the  government’s  own  infrastructure,  but  more  than  that,  it  was  to  be  “the  focal  point 
for  the  integration  of  CIP  activities,  strategic  coordination,  and  national  level  policy  development 
and  integration...  (as  well  as)  for  coordinating,  analyzing  and  sharing  threat  and  vulnerability 
information,  (cyber  and  physical).”  Ten  key  critical  infrastructure  sectors  were  identified  (see 
Annex  A)  and  federal  departments  were  designated  to  head  each  sector.  Natural  Resources 
Canada,  supported  by  the  Canadian  Nuclear  Safety  Commission  (CNSC),  International  Joint 
Commission  (IJC)  and  the  National  Energy  Board  (NEB),  were  to  be  responsible  for  “Energy  and 
Utilities.” 


58  “Securing  an  Open  Society:  Canada’s  National  Security  Policy,”  2004. 

59  Ibid. 

60  “Government  of  Canada  Position  Paper  on  a  National  Strategy  for  Infrastructure  Protection.” 
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Key  elements  of  the  strategy  were  set  out  in  the  paper  which  described  a  continuum  of  activities 
but  the  paper  failed  to  clarify  how  these  activities  would  be  integrated  and  guided  by  a  national- 
level  capacity.  Hay  remarked  that  “its  treatment  of  practical  governance  issues — who  should  do 
what — remained  cursory  and  vague.”61  By  early  2006,  no  strategy  had  been  approved.  Under  the 
newly  elected  Conservative  government,  priorities  had  changed  and  an  alteration  in  the  cabinet 
committee  structure  meant  that  infrastructure  protection  was  now  handled  by  a  cabinet  committee 
on  foreign  affairs  and  national  security.  Nevertheless,  in  January  2007,  federal,  provincial  and 
territorial  ministers  agreed  to  adopt  a  comprehensive  all-hazards  approach  to  emergency 
management  which  would  incorporate  its  four  functions:  prevention  and  mitigation,  preparedness, 
response  and  recovery. 


61  Hay,  “Who  Does  What?  Critical  Energy  Infrastructure  Protection  in  the  Canadian  Government.” 
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“Working  Towards  a  National  Strategy  and  Action 
Plan  for  Critical  Infrastructure,”  2008 


The  latest  iteration  of  a  critical  infrastructure  strategy  for  Canada  was  issued  in  2008  by  Public 
Safety  Canada  in  a  draft  paper  entitled,  Working  Towards  a  National  Strategy  and  Action  Plan 
for  Critical  Infrastructure .62  If  approved,  the  strategy  will  focus  primarily  on  improving 
emergency  preparedness,  supply  assurance,  and  mitigation  management.  While  optimists  are 
hopeful  that  a  comprehensive  and  clear  strategy  aimed  at  securing  critical  infrastructure  and 
enhancing  business  resilience  is  finally  about  to  emerge,  sceptics  question  whether  this  latest 
strategy  and  action  plan  will  achieve  any  more  than  its  predecessors  given  the  amount  of  time 
which  has  elapsed  since  it  was  first  mooted. 

The  draft  strategy  builds  upon  the  principle  of  subsidiarity,  where  primary  responsibility  for 
critical  infrastructure  remains  with  private  and  public  sector  owners  and  operators;  it  is  an  “all¬ 
hazards”  approach  to  emergency  management  and  focuses  on  critical  infrastructure  which  is  of 
Canada  wide  importance.  The  integrated  action  plan  is  structured  on  federal  coordination  of  the 
efforts  of  other  stakeholders  in  a  collaborative  approach  which  would  aim  to  improve  information 
sharing  among  all  participants  and  thereby  enhance  protection.  Greater  consistency  and  coherence 
would  be  achieved  through  the  development  of  cooperative  partnerships  at  home  and  abroad. 
Collaboration  and  information  sharing  are  key  elements. 

Public  Safety  Canada  describes  its  own  role  as  leading  and  coordinating  the  activities  of  other 
actors  across  all  Cl  sectors63  to  develop  a  more  comprehensive,  coherent,  cross-Canada  approach 
for  securing  critical  infrastructure.  Officials  have  indicated  that  they  are  working  on  the 
implementation  of  the  Strategy  pending  formal  approval.  (The  main  points  are  summarized  at 
Annex  C). 

As  the  line  between  security  and  safety  incidents  has  become  blurred,  so  there  is  recognition  that 
a  more  integrated  approach  which  bridges  jurisdictional  divisions  is  needed  to  enhance  the 
efficiency  and  effectiveness  of  measures  to  protect  and  strengthen  the  resilience  of  Canada’s 
critical  infrastructure.  Present  priorities  place  emphasis  on  Cyber-security  and  Critical  Energy 
Infrastructure  Protection  (pending  approval  of  the  proposed  National  Strategy  and  Action  Plan). 


62  “Working  Towards  a  National  Strategy  and  Action  Plan  for  Critical  Infrastructure,”  2008. 

63  Ibid.,  p.  4. 
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10  The  Governance  Framework 


When  the  Conference  Board  of  Canada  asked  public  and  private  sector  leaders  to  identify  the 
greatest  threat  to  national  security  and  public  safety  in  Canada,  the  responses  focused  not  on 
natural  disasters,  terrorism,  cyber-attacks  or  pandemics  but  instead  identified  the  lack  of  clarity 
around  governance  as  the  greatest  threat.64  In  a  2006  study  for  the  Canadian  Centre  of  Intelligence 
and  Security  Studies  at  Carleton  University,  John  Hay  observed  that,  despite  the  post  9/11 
reorganization  “it  is  still  not  altogether  clear  who  in  the  federal  government  does  what”  in  terms 
of  responsibility  for  the  protection  of  infrastructure.  How  authority  is  exercised  with  respect  to 
policy  approval  and  resource  acquisition  is  a  critical  factor  in  terms  of  a  government’s  ability  to 
fulfill  its  declared  strategy  aims.  In  developing  an  appropriate  governance  framework  for  the 
protection  of  critical  infrastructure,  the  federal  government  must  confront  the  fact  that  since 
threats  respect  neither  national,  sectoral,  nor  jurisdictional  boundaries,  an  effective  response  will 
need  to  be  equally  seamless.  Given  Canada’s  constitutional  arrangements,  achieving  a 
collaborative,  participative  and  integrated  approach  involving  all  stakeholders  is  likely  to  be  a 
long  and  difficult  process,  fraught  with  jurisdictional  tensions.  But  any  failure  in  direction  and 
control  or  in  the  relationships  among  the  numerous  actors  involved  could  intensify  the  impact  of  a 
national  security  or  public  safety  incident. 

Where  there  are  multiple  stakeholders,  regulatory  authorities  and  different  levels  of  government, 
each  required  to  engage  collaboratively  in  the  security  and  emergency  management  aspects  of 
critical  infrastructure  and  related  mitigation  and  resilience  issues,  a  clear  and  undisputed  lead 
department  with  the  necessary  powers  of  direction  and  control  will  be  crucial.  Good  governance 
further  requires  that  there  be  shared  principles  and  agreed  mandates,  clear  terms  of  reference, 
coordination  mechanisms  and  accountability  protocols  in  place  as  part  of  the  policy  approval  and 
resource  acquisition  road  map.  If  these  are  lacking,  there  will  be  confusion  about  roles  and 
responsibilities;  how  expressed  “concerns”  can  be  prioritized  at  all  levels  of  government;  and 
which  individuals  and  organizations  are  to  be  held  accountable  for  policy  implementation. 
Arguably,  it  has  been  the  inability  to  address  these  issues  which  have  caused  the  extensive  delays 
in  formalizing  a  national  strategy  for  critical  infrastructure  protection  in  Canada. 


64  Trevor  Munn-Venn  and  Andrew  Archibald,  A  Resilient  Canada:  Governance  for  National  Security  and 
Public  Safety,  (Ottawa:  Conference  Board  of  Canada,  November  2007). 
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11  National  Leadership — CEIP 


The  Emergency  Management  Act  (2007)  affirmed  federal  authority  over  critical  infrastructure 
protection.  It  stipulates  that  the  role  of  the  Minister  of  Public  Safety  is  to  ‘exercise  leadership 
relating  to  emergency  management  by  coordinating  federal  emergency  management  activities 
among  federal  departments  and  agencies,  and  in  cooperation  with  the  provinces  and  territories’ 
and  “to  provide  advice  and  to  analyze  and  evaluate  federal  departmental  emergency  management 
plans,  which  include  critical  infrastructure  protection.”  Although  constrained  by  the  constitution, 
the  federal  government  has  a  duty  to  ensure  the  continuity  of  essential  services  and  systems,  make 
them  more  resistant  to  disruption  and  better  able  to  recover.  Federal  involvement  is  focused  on 
those  events  and  circumstances  that  generally  require  a  national  response. 

The  same  Act  designated  Public  Safety  Canada  the  lead  federal  department,  answerable  to  the 
Minister,  with  respect  to  the  protection  of  national  critical  infrastructure.  Through  legislation  and 
policy,  it  is  responsible  for  leading,  by  coordinating,  the  management  of  emergencies  among 
federal  departments  and  agencies,  and  coordinating  the  protection  of  critical  infrastructure. 
Canadian  federal  authorities  are  empowered  to  respond  to  all  hazards  including  acts  of  terrorism 
but  only  have  statutory  powers  to  intervene  in  incidents,  other  than  terrorism,  which  have  a 
national  security  interest  if  they  cross  provincial,  territorial  or  international  boundaries  although 
provinces  can  elicit  federal  assistance  on  a  case-by-case  basis.  Exceptionally,  nuclear  power  and 
uranium  production  comes  under  federal  jurisdiction. 

In  late  2009  the  Auditor  General  questioned  whether  Public  Safety  Canada  was  able  to  identify 
emergencies  that  are  beyond  the  capacity  of  other  players  and  coordinate  emergency  management 
activities  given  that  no  formal  framework  at  the  national  level  linking  the  federal  government 
with  the  owners  and  operators  of  critical  infrastructure  existed.65  Furthermore  the  Interim  Federal 
Emergency  Response  Plan  did  not  include  “updated  or  completed  definitions  of  the  roles, 
responsibilities,  and  capabilities  needed  for  an  integrated,  coordinated  approach  to  emergency 
response.”  In  2010,  Public  Safety  Canada  issued  a  National  Strategy  for  Critical  Infrastructure 
(dated  2009)  which  did  little  more  than  outline  future  aspirations. 

11.1  Federal  Departments  Responsibility  for  National  Critical 
Infrastructure 

All  federal  Departments  have  mandates  and  roles  which  govern  their  response  to  particular 
emergencies.  The  Royal  Canadian  Mounted  Police  (RCMP)  would  be  the  primary  federal 
response  agency  for  an  incident  involving  terrorist  or  criminal  acts;  Natural  Resources  Canada  is 
the  primary  subject  matter  expert  for  a  natural  event  causing  a  power  outage.  However,  lead 
departments  with  subject  expertise  are  responsible  for  each  of  the  critical  infrastructure  sectors. 
Statutory  or  regulatory  powers  vested  in  these  key  federal  line  departments  can  be  exercised  only 
in  respect  of  infrastructure  which  crosses  inter-provincial  boundaries  or  international  borders. 


65  “Emergency  Management — Public  Safety  Canada,”  Chapter  7  in  Report  of  the  Auditor  General  of 
Canada  to  the  House  of  Commons  (Ottawa  ,  Fall  2009),  esp.  pp.  9-18. 
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11.2  Natural  Resources  Canada 


The  Minister  of  Natural  Resources  derives  authority  from  a  number  of  pieces  of  legislation  i.e. 
the  Department  of  Natural  Resources  Act  (1994),  National  Energy  Board  Act  (1985),  Canada- 
Nova  Scotia  Offshore  Petroleum  Resources  Accord  Implementation  Act  (1988),  and  Energy 
Supplies  Emergency  Act  (1985).  As  the  lead  federal  department  for  the  Energy  and  Utilities 
sector  NRCan  is  supported  in  the  exercise  of  its  responsibilities  by  the  portfolio 
agencies — Canadian  Nuclear  Safety  Commission  (CNSC),  The  International  Joint  Commission, 
(IJC),  the  National  Energy  Board  (NEB),  The  Canada-Newfoundland  and  Labrador  Offshore 
Petroleum  Board  and  the  Canada-Nova  Scotia  Offshore  Petroleum  Board.  NEB,  CNSC, 
CNLOPB,  and  CNSOPB  are  required  to  report  to  Parliament  through  the  Minister.  They  derive 
their  authority  through  separate  specific  Acts  and  Regulations. 

Those  functions  formerly  carried  out  by  the  Energy  Infrastructure  Protection  Division,  (EIPD), 

were  allocated  to  various  parts  of  NRCan’ s  energy  sector  branch  in  2009  when  the  EIPD  ceased 

to  exist,  for  reasons  not  made  explicit.  NRCan  supported  PSEPC  in  the  formulation  of  the  first 

discussion  document  which  underpins  the  current  strategy  for  critical  infrastructure.  Although  the 

Emergency  Management  Act  (2007)  designated  Public  Safety  Canada  the  lead  agency  at  the 

federal  level,  the  absence  of  any  previous  effective  overarching  central  coordination  meant  that 

pro-active  departments  had  already  developed  their  own  initiatives  for  the  protection  of  critical 

infrastructure  and  were  using  different  critical  risk  assessment  methodologies.  While  Public 

Safety  Canada  has  started  to  develop  guidance  to  promote  a  consistent  approach,  this  has  yet  to  be 

finalized  or  distributed  to  those  departments  designated  to  lead  the  ten  critical  infrastructure 
.  66 
sectors. 

A  number  of  other  federal  departments  may  become  involved  in  an  emergency  incident  if  it 
escalates  or  spreads.  In  such  cases,  Public  Safety  Canada  has  a  coordinating  role  in  helping  to 
communicate  and  receive  information  about  the  current  situation  to  other  departments  and 
agencies  and  to  senior  officials  in  the  federal  government  and  other  jurisdictions.  Although 
reference  has  already  been  made  to  the  Government  Operations  Centre,  the  Canadian  government 
does  not  yet  have  in  place  a  centralized  clearing  house  for  information  pertaining  to  critical 
energy  infrastructure  protection  for  its  own  departments  and  agencies,  or  for  sharing  with  other 
jurisdictions.67 

1 1 .3  Regulatory  Bodies 

Regulatory  agencies  are  key  players  in  matters  relating  to  critical  energy  infrastructure  protection 
within  their  jurisdiction.  Their  role  in  support  of  the  Minister’s  responsibility  for  safety  and 
security  is  exercised  in  accordance  with  Canada’s  security  policy  and  goals.  The  National  Energy 
Board  Act  (1985)  was  amended  in  2005  to  provide  the  regulator  (i.e.,  NEB)  with  a  clear 
legislative  mandate  for  addressing  issues  related  to  the  security  of  critical  energy  infrastructure 
such  as  international  power  lines  and  international  and  inter-provincial  oil  and  gas  pipelines. 


66 

67 


Auditor  General’s  Report,  2009. 
Ibid. 
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The  North  American  Energy  Reliability  Corporation  (NERC)  is  a  non-governmental  entity  whose 
mission  is  to  ensure  that  the  bulk  electric  system  in  North  America  is  reliable,  adequate  and 
secure.  It  was  established  in  1968  as  a  result  of  the  Northeast  blackout  in  1966.  NERC  has 
operated  as  a  voluntary  organization,  relying  on  reciprocity,  peer  pressure  and  the  mutual  self- 
interest  of  all  those  involved  to  ensure  compliance  with  reliability  requirements.  However,  some 
NERC  standards  and  processes  were  deemed  inadequate  in  connection  with  the  2003  failure  and 
the  Task  Force  Report68  noted  that  if  NERC  had  had  the  authority  to  enforce  mandatory 
compliance  with  the  standards  the  blackout  might  have  been  averted. 


68  US-Canada  Power  System  Outage  Task  Force,  p.  17. 
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12  Information  Sharing  and  Collaboration 


Information  sharing  and  collaboration  between  the  public  and  private  sector  and  the  various  tiers 
of  government  are  key  strategic  objectives  of  the  proposed  national  strategy  for  critical 
infrastructure.  Besides  fostering  closer  relationships  and  a  better  mutual  understanding  between 
the  various  stakeholders,  the  federal  government  needs  help  in  identifying  the  criticality  of 
different  infrastructure  and  its  vulnerabilities,  while  owners  and  operators  need  information  in 
order  to  provide  appropriate  protection  for  the  nation’s  infrastructure.  Effective  two-way 
exchanges  of  sensitive  information  will  only  be  possible  once  trusted  partnerships  are  established 
and  a  “responsibility  to  provide”  culture  has  become  engrained  across  the  private  and  public 
sectors.  Various  initiatives  have  been  launched  to  foster  confidence  and  to  remove  legal  and 
bureaucratic  impediments. 

Energy  sector  owners  and  operators  have  been  reluctant  to  share  with  federal  authorities 
information  about  critical  infrastructure  that  might  identify  vulnerabilities  or  aspects  of  their 
business  which  could  give  competitors  an  advantage.  The  Access  to  Information  Act  (1985)  has 
therefore  been  amended  to  encourage  them  to  share  network  information — on  a  controlled 
basis — without  fear  of  disclosure  to  third  parties.  This  has  not  yet  been  tested  in  the  courts.  Under 
the  Emergency  Management  Act,  Section  8,  Deputy  Ministers  are  authorized  to  withhold 
information  received  from  third  parties,  e.g.,  owner/operators.  Conversely,  owners  and  operators 
need  information  from  central  authorities,  especially  about  particular  security  threats.  NRCan 
sponsored  security  clearances  for  approximately  200  industry  representatives  so  that  they  could 
attend  bi-annual  classified  briefings  on  the  threats  delivered  by  members  of  the  Canadian  Security 
and  Intelligence  Community  and  other  experts.69  This  was  to  assist  them  in  adopting  appropriate 
security  enhancement  measures.  Information  which  enhances  local  understanding  about  the 
threats  is  one  thing;  actionable  intelligence  which  is  sufficiently  specific  and  timely  to  prevent  or 
pre-empt  them  is  another.  Managing  expectations  about  what  the  central  agencies  have  to  offer 
will  be  the  challenge. 

Regular  meetings  between  industry  and  government  officials  have  been  convened  and  horizontal 
collaboration  encouraged  across  the  sectors  with  federal,  provincial  and  territorial  authorities. 
NRCan  has  facilitated  information  sharing  between  government  departments,  intelligence  and 
security  agencies,  with  international  allies,  and  with  regulators  and  energy  sector  stakeholders.  It 
has  co-hosted  regular  fora  on  pipeline  security  with  its  American  counterparts  and  joined  with 
industry  associations  in  mounting  professional  conferences  and  meetings  on  issues  of  shared 
concern.  Private  and  public  sector  owners/operators  in  the  energy  sector  have  established  their 
own  organizational  mechanisms  for  information  sharing  and  cooperation  in  the  management  and 
mitigation  of  threats.  For  example,  the  electric  power  industry  has  set  up  ten  regional  “reliability 
councils”  across  the  U.S.  and  Canada,  headed  by  (NERC)  for  the  setting  and  enforcing  of 
reliability  and  performance  standards.  Similar  mechanisms  exist  for  other  energy  sectors, 
including  oil  and  natural  gas  producers  and  pipeline  operators. 


69  The  Hon.  Gary  Lunn,  former  Minister  of  Natural  Resources,  addressing  the  2007  International  Pipeline 
Security  Forum,  24  October  2007,  Ottawa — “We  have  sponsored  over  200  industry  representatives  in 
obtaining  Secret  Level  II  security  clearance.  This  enables  us  to  share  information  with  industry  and  their 
associations  so  that  the  appropriate  security  enhancement  measures  can  be  adopted.” 
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12.1  International  Partnerships 


Since  Canada’s  energy  economy  is  part  of  a  North  American  energy  hemisphere  Canada’s  energy 
policy  must  not  only  be  “rational  and  national”  but  international.  North  American  energy  policy  is 
formalized  to  some  degree  by  Canada/U.S.  bi-lateral  and  Canada/U.S./Mexico  tri-lateral  and 
NAFTA  agreements,  but  cooperative  informal  relationships  are  responsible  in  large  part  for 
advancing  mutual  objectives.  Informal  arrangements  such  as  information  and  alert  exchanges 
between  owners  and  operators  and  their  industry  associations  on  both  sides  of  the  border  have 
been  invaluable.  However,  the  vital  importance  of  protecting  energy  security  from  emerging 
threats  suggests  that  there  may  be  a  need  to  bring  more  bilateral  structure  and  organization  to  the 
task.70 

In  the  event  of  an  imminent  cyber  threat,  no  single  U.S.  government  entity  currently  has  sufficient 
authority  to  issue  emergency  orders  to  the  private-sector  bulk  power  industry.  Two  current 
congressional  bills  in  the  U.S.  propose  assigning  much  of  that  power  to  the  Federal  Electricity 
Regulatory  Commission  (FERC),  as  well  as  giving  it  authority  to  order  the  power  industry  to 
upgrade  operational  security  standards.  Although  the  Canadian  power-utilities  association  and  the 
broader  NERC  support  the  proposal  that  FERC  become  the  lead  authority  during  an  emergency, 
they  oppose  granting  FERC  the  power  to  impose  new  and  presumably  tougher  security  standards 
since  this  would  mean  that  FERC  would  be  determining  operating  standards  in  Canada — a 
jurisdictional  sovereignty  issue.  A  bi-lateral  agreement  is  preferred. 

NRCan’s  Energy  Sector  Reporting  service,  which  was  once  available  through  the  Internet  to 
selected  stakeholders,  comprised  current  updates  on  incidents,  government  reports  and  other 
important  open-source  documentation  pertaining  to  energy  security.  It  is  no  longer  available 
although  Public  Safety  Canada  produces  a  Daily  Infrastructure  Report  comprising  summaries  of 
emergency  management  information  concerning  critical  infrastructure.71  NRCan  has  sponsored  a 
series  of  published  research  studies  on  various  energy  related  topics:  an  information-sharing 
initiative  which  has  served  to  build  capacity.  The  importance  of  academic  outreach  has  been 
emphasized  by  the  US  Department  of  Homeland  Security  which  looks  to  academic  research  to 
develop  knowledge  about  vulnerabilities  and  emerging  threats72  and  create  the  skill  sets  needed 
for  future  homeland  security  professionals. 

The  draft  strategy  seeks  to  encourage  the  establishment  of  sector  networks  for  each  of  the  critical 
infrastructure  sectors  based  on  existing  coordination  and  consultation  mechanisms.  At  a  minimum 
these  would  provide  a  forum  for  sector  discussions  and  information  exchange  between  key 
members  of  the  private  and  public  sectors  analogous  to  those  which  exist  in  the  U.S.  which  bring 
together  various  industrial  groups  into  a  consultative  arrangement  with  government  through 
dedicated  Information  Sharing  and  Analysis  Centers  (ISACs).  The  Energy  and  Utilities  sector  is 
currently  the  only  one  in  operation.  To  promote  information-sharing  across  the  sector  networks 


70  “U.S.  grid-security  measures  may  hurt  Canadian  companies,”  Homeland  Security  News  wire,  25 
November  2009. 

71  The  Public  Safety  Canada  Daily  Infrastructure  Report  is  accessible  at: 
http://www.publicsafety.gc.ca/dir/dir09-040-eng.aspx?rss=false. 

72  Remarks  made  by  speakers  at  the  4th  Annual  Homeland  Defense  and  Security  Education  Conference, 
Washington,  24-26  February  2010. 
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and  address  cross-jurisdictional  issues,  Public  Safety  Canada  proposes  to  establish  a  Cross-Sector 
Forum.73 


73  “Working  Towards  a  National  Strategy  for  Critical  Infrastructure,”  p.  5. 
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13  Conclusion 


. .  .the  Government  of  Canada  focuses  its  efforts  both  on  improving  ways  to 
provide  protection  where  it  is  reasonable,  and  also  on  ways  to  assure  the 
continued  provision  of  essential  services  to  Canadians.  Protection  and 
assurance  can  be  achieved  through  better  information  collection, 
assessment  and  sharing,  and  through  risk  management.  Both  protection  and 
assurance  are  ongoing  objectives  that  the  Government  of  Canada  seeks.74 

How  is  Canada  doing  with  respect  to  the  protection  and  assurance  of  critical  energy 
infrastructure?  Space  precludes  a  comprehensive  review,  but  the  long  delays  in  the  emergence  of 
a  formal  strategy  for  both  critical  national  infrastructure  and  cyber  are  clear  indications  that  there 
are  problems.  The  challenge  to  existing  mandates  and  responsibilities,  the  absence  of  good 
governance  and  leadership  and  a  period  of  political  turmoil,  may  explain  why,  so  long  after  the 
first  attempts  to  build  a  national  framework  for  cooperative  action,  “the  strategy  to  do  this  is  still 
in  draft  form  and  the  critical  infrastructure  that  needs  to  be  protected  has  not  yet  been 
determined.”75  There  is  a  long  way  to  go  yet  before  Canada’s  integrated  strategy  is  in  place  and 
the  collaborative  relationships  on  which  it  depends  are  established.  The  Auditor  General  has 
observed  that  “Public  Safety  has  not  exercised  the  leadership  necessary  to  coordinate  emergency 
management  activities,  including  critical  infrastructure  protection  in  Canada.”76  Part  of  the 
difficulty  in  meeting  its  goals,  it  was  suggested,  was  the  high  turnover  in  the  senior  ranks  of 
Public  Safety. 

No  national  critical  infrastructure  assets  or  services  have  yet  been  identified  or  agreed  with  the 
various  owners/operators  and  federal,  provincial  and  territorial  authorities  nor  is  there  any 
legislation  which  requires  them  to  do  so.  Yet  as  Jacques  Shore  points  out  there  is  a  legal 
imperative  on  the  part  of  both  government  and  private  enterprise  to  protect  critical 
infrastructure.77  Canada’s  integrated  approach  to  preventing  or  mitigating  potential  threats  builds 
on  existing  relationships  rather  than  challenging  the  status  quo:  it  aims  to  encourage  and  facilitate 
a  more  cohesive,  coordinated  effort  by  all  stakeholders  and  in  that  sense  is  essentially  passive  and 
reactive. 

Developing  protective  security  measures  and  incident  response  plans  for  national  critical 
infrastructures  necessarily  involves  “ trans-boundary  thinking ”  from  the  outset.  A  “containment” 
response  to  an  incident  will  not  be  adequate.  Prevention  and  planning  must  include  the 
assumption  that  there  will  be  cascading  effects  and  these  must  be  identified.  Response  strategies 
which  engage  the  whole  of  government  from  the  inception  will  entail  thinking  through  the 
jurisdictional  and  legal  ramifications  and  conflicts,  and  developing  approaches  that  are 
anticipative,  flexible,  adaptive,  and  respect  the  rule  of  law. 


74  “National  Strategy  for  Critical  Infrastructure  Protection,”  2004. 

75  “Report  of  the  Auditor  General  of  Canada  to  the  House  of  Commons,”  p.  2. 

76  Ibid. 

77  Jacques  J.  M.  Shore,  “The  Legal  Imperative  to  Protect  Critical  Energy  Infrastructure,”  Critical  Energy 
Infrastructure  Protection  Policy  Research  Series  (Ottawa:  Carleton  University,  Canadian  Centre  for 
Intelligence  and  Security  Studies,  2008). 
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Martin  Rudner  has  suggested  a  more  pro-active  approach  which  would  involve  adopting  a 
counterintelligence  mentality  and  an  intelligence-led  strategy  to  prevent  destructive  adversaries 
from  attacking  and  penetrating  national  Cl  assets  and  services.78  The  aim  would  be  to  identify, 
deter  and  prevent  threats,  but  since  there  will  always  be  protective  gaps,  measures  to  enhance 
resilience  are  also  necessary. 


78  Martin  Rudner,  “Protecting  Critical  Energy  Infrastructure  Through  Intelligence,”  International  Journal  of 
Intelligence  and  Counter  Intelligence,  Vol.  21,  No.  4,  Winter  2008-2009. 
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Annex  A  National  Critical  Infrastructure  Sectors 


The  10  sectors  that  form  the  basis  of  the  NCIAP  and  sample  sub-sectors  for  each  sector79are  the 
following: 

1.  Energy  and  Utilities 

Electrical  power  (generation,  transmission,  nuclear) 

Natural  gas 

Oil  production  and  transmission  systems 

2.  Communications  and  Information  Technology 

Telecommunications  (phone,  fax,  cable,  satellites) 

Broadcasting  systems 
Software 
Hardware 
Networks  (internet) 

3.  Finance 

Banking 
Securities 
Payments  System 

4.  Health  Care 

Hospitals 

Health-care  facilities 
Blood-supply  facilities 
Laboratories 
Pharmaceuticals 

5.  Food 

Food  safety 

Agriculture  and  food  industry 
Food  distribution 

6.  Water 

Drinking  water 
Wastewater  management 

7.  Transportation 

Aii- 

Rail 

Marine 


79  ( 

Working  Towards  a  National  Strategy  and  Action  Plan  for  Critical  Infrastructure’  (2008). 
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Surface 


8.  Safety 

Chemical,  biological,  radiological,  and  nuclear  safety 
Hazardous  materials 
Search  and  rescue 

Emergency  services  (police,  fire,  ambulance  and  others) 
Dams 

9.  Government 

Government  facilities 

Government  services  (for  example  meteorological  services) 
Government  information  networks 
Government  assets 

Key  national  symbols  (cultural  institutions  and  national  sites 
and  monuments) 

10.  Manufacturing 

Chemical  industry 
Defence  industrial  base 
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Annex  B  Summary:  Government  of  Canada  Position 
Paper  2004 


1.  Guiding  Principles:  five  guiding  principles  (awareness,  integration,  participation, 
accountability  and  all-hazards)  will  influence  the  development  of  the  national  CIP  strategy. 

2.  Risk  Management:  use  the  integrated  risk  management  (IRM)  framework  as  a  starting 
point  when  developing  the  national  CIP  strategy. 

3.  Information  Sharing:  promote  and  support  timely  and  accurate  information  sharing 
across  jurisdictions  and  Cl  sectors.  This  will  require  establishing  working  groups  with 
participants  at  all  levels  and  conducting  stakeholder  consultations,  including  with  international 
partners,  to  determine:  the  nature  of  the  information  required;  the  most  appropriate  vehicles  to 
exchange  the  information;  and  to  increase  interoperability. 

4.  Inventory  of  Cl  Assets:  identify  and  assess  its  own  Cl.  In  addition,  the  Government  of 
Canada  will  work  with  other  levels  of  government  and  the  private  sector  to  ensure  that  processes 
are  in  place  to  identify  their  critical  infrastructures  (or  components  thereof)  as  a  measure  to 
strengthen  public  safety  and  as  part  of  good  business  practices,  and  that  all  associated  information 
be  protected  to  the  fullest  extent  of  the  law. 

5.  Threats  and  Warnings:  continue  to  improve  mechanisms  to  quickly  and  effectively 
communicate  relevant  information  and  intelligence  on  threats  to  Cl  to  stakeholders. 

6.  Cl  Interdependencies:  interdependency  analysis  must  be  integrated  into  risk 
management  decisions,  mitigation  and  preparation  strategies,  and  response  and  recovery 
activities.  In  addition,  the  Government  of  Canada  will  coordinate  national  efforts  in 
interdependency  research  and  development,  which  is  essential  to  understanding  this  issue. 

7.  Governance  Mechanisms:  establish  a  governance  architecture  that  will  result  in  national 
direction  and  coordination  of  CIP  activities.  To  this  end,  the  Government  of  Canada  will  establish 
a  CIP  national  body,  and  where  appropriate  mechanisms  within  sectors  and  to  address  horizontal 
and  regional  issues. 

8.  Research  and  Development:  conduct  targeted  research  projects  and  leverage  Canadian 
and  international  science  and  technology  capabilities  in  order  to  address  gaps  in  knowledge,  build 
national  capacity,  and  to  create  innovative  solutions  for  CIP. 

9.  International  Cooperation:  participate  in  international  CIP  initiatives  and  to  strengthen 
information-sharing  mechanisms  and  operational  linkages  with  other  countries  and  international 
organizations. 


Source:  Government  of  Canada  Position  Paper  on  a  National  Strategy  for  Critical 
Infrastructure  Protection  (2004)  p.12. 
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Annex  C  “Working  Towards  a  National  Strategy  and 
Action  Plan  for  Critical  Infrastructure”  (2008) 


Purpose:  Strengthen  the  resilience  of  critical  infrastructure  in  Canada  by  “setting  the  direction” 
against  current  and  emerging  hazards,  [see  definition  of  critical  infrastructure  on  page  1  of  this 
study] 

Objectives:  To  enhance  resilience 

•  Build  trusted  and  sustainable  partnerships 

•  Implement  an  all-hazards  risk  management  approach;  and 

•  Advance  the  timely  sharing  and  protection  of  information  among  partners. 

Primary  responsibility  for  critical  infrastructure  remains  with  private  and  public  sector  owners 
and  operators  but  to  co-ordinate  their  efforts,  the  integrated  action  plan  proposes  a  collaborative 
approach  the  aim  of  which  would  be  to  improve  information  sharing  among  participants  and 
thereby  enhance  protection. 

Classification  of  Critical  Infrastructure:  The  National  Strategy  proposes  that  “critical 
infrastructure  efforts”  be  aligned  across  ten  sectors  and  also  across  the  various  jurisdictions.  The 
ten  sectors  as  follows: 

Communications,  Emergency  Services,  Energy.  Finance,  Food,  Government,  Health, 
Transportation,  Water,  and  Manufacturing. 

Guidance:  The  Plan  provides  guidance  on  the  identification  of  risk,  the  implementation  of 
protective  measures  and  effective  responses  to  disruptions  of  critical  infrastructure. 

Public  Safety  Canada  has  been  designated  to  lead  and  co-ordinate  these  collaborative  efforts 
across  all  Cl  sectors.  Its  role  is  described  in  the  paper  as  being  to  develop  a  more  comprehensive, 
coherent,  cross-Canada  approach  for  protecting  all  critical  infrastructure  by  leading  and 
coordinating  the  activities  of  other  actors  within  a  collaborative  framework. 
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